Security Verify Access (Ibm) - vulnerabilities (CVEs)

141 CVEs, 23 in the last 30 days, 52 known versions, newest CVE from 2026-10-19. Vendor: Ibm.

CVEs of Security Verify Access

CVE-2026-109126 - CVSS 8.8 (high), 2026-10-19: IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges…
CVE-2026-11888 - CVSS 7.5 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack.
CVE-2026-11930 - CVSS 7.5 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web…
CVE-2026-11939 - CVSS 5.3 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery.
CVE-2026-16823 - CVSS 9.1 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security…
CVE-2026-16830 - CVSS 5.4 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data…
CVE-2026-16916 - CVSS 9.1 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute…
CVE-2026-17189 - CVSS 8.2 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability…
CVE-2026-18740 - CVSS 8.8 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform…
CVE-2026-19491 - CVSS 9.1 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due…
CVE-2026-19494 - CVSS 8.1 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass…
CVE-2026-19498 - CVSS 7.5 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service…
CVE-2026-19493 - CVSS 7.5 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file…
CVE-2026-19482 - CVSS 8.8 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute…
CVE-2026-78399 - CVSS 6.5 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of…
CVE-2026-78388 - CVSS 8.8 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could…
CVE-2026-78401 - CVSS 9.8 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute…
CVE-2026-78406 - CVSS 9.8 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute…
CVE-2026-19878 - CVSS 6.5 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass…
CVE-2026-12091 - CVSS 5.3 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based…
CVE-2026-11936 - CVSS 5.4 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is…
CVE-2026-12109 - CVSS 7.2 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and…
CVE-2026-78407 - CVSS 5.4 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability…
CVE-2026-11921 - CVSS 9.1 (critical), 2026-09-15: IBM Verify Identity Access containers may not apply management password change operations correctly.
CVE-2026-11926 - CVSS 7.5 (high), 2026-09-15: IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
CVE-2026-11927 - CVSS 6.5 (medium), 2026-09-15: IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.
CVE-2026-11928 - CVSS 9.8 (critical), 2026-09-15: IBM Verify Identity Access is vulnerable to a buffer overflow attack.
CVE-2026-11929 - CVSS 7.5 (high), 2026-09-15: IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.
CVE-2026-11934 - CVSS 7.2 (high), 2026-09-15: IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied…
CVE-2026-12101 - CVSS 8.1 (high), 2026-09-15: IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied…
CVE-2026-12358 - CVSS 7.5 (high), 2026-09-15: IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
CVE-2026-13260 - CVSS 7.5 (high), 2026-09-14: IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
CVE-2026-13272 - CVSS 5.4 (medium), 2026-09-14: IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further…
CVE-2026-13276 - CVSS 6.1 (medium), 2026-09-14: IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify…
CVE-2026-13277 - CVSS 4.7 (medium), 2026-09-14: IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…
CVE-2026-13297 - CVSS 7.5 (high), 2026-09-04: IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.
CVE-2026-11932 - CVSS 7.5 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-17616 - CVSS 9.8 (critical), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-12359 - CVSS 8.1 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-11923 - CVSS 7.4 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-12004 - CVSS 8.7 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-13267 - CVSS 8.1 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-11937 - CVSS 3.1 (low), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-12618 - CVSS 7.2 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-12005 - CVSS 7.2 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-11904 - CVSS 5.3 (medium), 2026-07-30: IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-4938 - CVSS 6.5 (medium), 2026-07-17: IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-7364 - CVSS 6.1 (medium), 2026-07-17: IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-8861 - CVSS 5.3 (medium), 2026-07-17: IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This…
CVE-2026-5926 - CVSS 6.5 (medium), 2026-04-23: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1346 - CVSS 9.3 (critical), 2026-04-08: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1343 - CVSS 7.2 (high), 2026-04-08: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1342 - CVSS 8.5 (high), 2026-04-08: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-4364 - CVSS 5.4 (medium), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-4101 - CVSS 9.8 (critical), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-2862 - CVSS 5.3 (medium), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-2475 - CVSS 4.7 (medium), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1491 - CVSS 5.3 (medium), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1345 - CVSS 7.3 (high), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2025-36087 - CVSS 9.8 (critical), 2025-10-13: IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain…
CVE-2025-36354 - CVSS 7.3 (high), 2025-10-06: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user…
CVE-2025-36356 - CVSS 9.3 (critical), 2025-10-06: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated…
CVE-2025-36355 - CVSS 8.5 (high), 2025-10-06: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated…
CVE-2025-0163 - CVSS 5.3 (medium), 2025-06-11: IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response…
CVE-2024-56342 - CVSS 5.3 (medium), 2025-06-06: IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is…
CVE-2024-56343 - CVSS 6.5 (medium), 2025-06-06: IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.
CVE-2025-0161 - CVSS 7.8 (high), 2025-02-20: IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on…
CVE-2024-49814 - CVSS 7.8 (high), 2025-02-06: IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their privileges due to execution with…
CVE-2024-45657 - CVSS 6.7 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect…
CVE-2024-43187 - CVSS 7.5 (high), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel…
CVE-2024-40700 - CVSS 6.1 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated…
CVE-2024-45658 - CVSS 5.3 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed…
CVE-2024-35138 - CVSS 6.5 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute…
CVE-2024-45659 - CVSS 5.3 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed…
CVE-2024-45647 - CVSS 9.8 (critical), 2025-01-20: IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change…
CVE-2024-49805 - CVSS 9.8 (critical), 2024-11-29: IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
CVE-2024-49804 - CVSS 7.8 (high), 2024-11-29: IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative user to escalate their privileges due to…
CVE-2024-49803 - CVSS 9.8 (critical), 2024-11-29: IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending…
CVE-2024-49806 - CVSS 9.8 (critical), 2024-11-29: IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
CVE-2024-35133 - CVSS 8.2 (high), 2024-08-29: IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect…
CVE-2024-28772 - CVSS 6.8 (medium), 2024-07-25: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability…
CVE-2022-32759 - CVSS 7.5 (high), 2024-07-25: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an…
CVE-2024-31883 - CVSS 5.9 (medium), 2024-06-27: IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due…
CVE-2023-30430 - CVSS 5.5 (medium), 2024-06-27: IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace logs. IBM X-Force ID: 252183.
CVE-2024-31873 - CVSS 7.5 (high), 2024-04-10: IBM Security Verify Access Appliance 10.0.0 through 10.0.7 contains hard-coded credentials which it uses for its own inbound authentication that could be…
CVE-2024-31872 - CVSS 8.1 (high), 2024-04-10: IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle attack when deploying Open Source…
CVE-2024-31871 - CVSS 8.1 (high), 2024-04-10: IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle attack when deploying Python scripts…
CVE-2024-31874 - CVSS 6.2 (medium), 2024-04-10: IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables when deploying that could allow a local user to cause a denial of…
CVE-2024-28787 - CVSS 10 (critical), 2024-04-04: IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive…
CVE-2024-25027 - CVSS 6.2 (medium), 2024-03-31: IBM Security Verify Access 10.0.6 could disclose sensitive snapshot information due to missing encryption. IBM X-Force ID: 281607.
CVE-2023-43017 - CVSS 8.2 (high), 2024-02-07: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that could allow remote access. IBM X-Force…
CVE-2023-32328 - CVSS 9.8 (critical), 2024-02-07: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of…
CVE-2023-32330 - CVSS 9.8 (critical), 2024-02-07: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure calls that could allow an attacker on the network to take control of the server. IBM…
CVE-2023-43016 - CVSS 7.3 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-31004 - CVSS 9 (critical), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-32327 - CVSS 7.1 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-31006 - CVSS 7.5 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-31005 - CVSS 7.8 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-32329 - CVSS 6.2 (medium), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-30999 - CVSS 7.5 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…