Security Verify Access Container (Ibm) - vulnerabilities (CVEs)

58 CVEs, 22 in the last 30 days, 10 known versions, newest CVE from 2026-10-08. Vendor: Ibm.

CVEs of Security Verify Access Container

CVE-2026-11888 - CVSS 7.5 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack.
CVE-2026-11930 - CVSS 7.5 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web…
CVE-2026-11939 - CVSS 5.3 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery.
CVE-2026-16823 - CVSS 9.1 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security…
CVE-2026-16830 - CVSS 5.4 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data…
CVE-2026-16916 - CVSS 9.1 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute…
CVE-2026-17189 - CVSS 8.2 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability…
CVE-2026-18740 - CVSS 8.8 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform…
CVE-2026-19491 - CVSS 9.1 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due…
CVE-2026-19494 - CVSS 8.1 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass…
CVE-2026-19498 - CVSS 7.5 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service…
CVE-2026-19493 - CVSS 7.5 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file…
CVE-2026-19482 - CVSS 8.8 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute…
CVE-2026-78399 - CVSS 6.5 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of…
CVE-2026-78388 - CVSS 8.8 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could…
CVE-2026-78401 - CVSS 9.8 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute…
CVE-2026-78406 - CVSS 9.8 (critical), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute…
CVE-2026-19878 - CVSS 6.5 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass…
CVE-2026-12091 - CVSS 5.3 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based…
CVE-2026-11936 - CVSS 5.4 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is…
CVE-2026-12109 - CVSS 7.2 (high), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and…
CVE-2026-78407 - CVSS 5.4 (medium), 2026-10-08: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability…
CVE-2026-11921 - CVSS 9.1 (critical), 2026-09-15: IBM Verify Identity Access containers may not apply management password change operations correctly.
CVE-2026-11926 - CVSS 7.5 (high), 2026-09-15: IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
CVE-2026-11927 - CVSS 6.5 (medium), 2026-09-15: IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.
CVE-2026-11928 - CVSS 9.8 (critical), 2026-09-15: IBM Verify Identity Access is vulnerable to a buffer overflow attack.
CVE-2026-11929 - CVSS 7.5 (high), 2026-09-15: IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.
CVE-2026-11934 - CVSS 7.2 (high), 2026-09-15: IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied…
CVE-2026-12101 - CVSS 8.1 (high), 2026-09-15: IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied…
CVE-2026-12358 - CVSS 7.5 (high), 2026-09-15: IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
CVE-2026-13260 - CVSS 7.5 (high), 2026-09-14: IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
CVE-2026-13272 - CVSS 5.4 (medium), 2026-09-14: IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further…
CVE-2026-13276 - CVSS 6.1 (medium), 2026-09-14: IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify…
CVE-2026-13277 - CVSS 4.7 (medium), 2026-09-14: IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…
CVE-2026-13297 - CVSS 7.5 (high), 2026-09-04: IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.
CVE-2026-11932 - CVSS 7.5 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-17616 - CVSS 9.8 (critical), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-12359 - CVSS 8.1 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-11923 - CVSS 7.4 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-12004 - CVSS 8.7 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-13267 - CVSS 8.1 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-11937 - CVSS 3.1 (low), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-12618 - CVSS 7.2 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-12005 - CVSS 7.2 (high), 2026-08-12: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-11904 - CVSS 5.3 (medium), 2026-07-30: IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-4938 - CVSS 6.5 (medium), 2026-07-17: IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-7364 - CVSS 6.1 (medium), 2026-07-17: IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through…
CVE-2026-8861 - CVSS 5.3 (medium), 2026-07-17: IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This…
CVE-2026-5926 - CVSS 6.5 (medium), 2026-04-23: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1346 - CVSS 9.3 (critical), 2026-04-08: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1343 - CVSS 7.2 (high), 2026-04-08: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1342 - CVSS 8.5 (high), 2026-04-08: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-4364 - CVSS 5.4 (medium), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-4101 - CVSS 9.8 (critical), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-2862 - CVSS 5.3 (medium), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1491 - CVSS 5.3 (medium), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-1345 - CVSS 7.3 (high), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2026-2475 - CVSS 4.7 (medium), 2026-04-01: IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0…
CVE-2024-35138 - CVSS 6.5 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute…
CVE-2024-45657 - CVSS 6.7 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect…
CVE-2024-43187 - CVSS 7.5 (high), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel…
CVE-2024-40700 - CVSS 6.1 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated…
CVE-2024-45658 - CVSS 5.3 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed…
CVE-2024-45659 - CVSS 5.3 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed…
CVE-2024-28787 - CVSS 10 (critical), 2024-04-04: IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive…