Security Verify Access Docker (Ibm) - vulnerabilities (CVEs)

33 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2025-10-13. Vendor: Ibm.

CVEs of Security Verify Access Docker

CVE-2025-36087 - CVSS 9.8 (critical), 2025-10-13: IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain…
CVE-2025-36355 - CVSS 8.5 (high), 2025-10-06: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated…
CVE-2025-36354 - CVSS 7.3 (high), 2025-10-06: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user…
CVE-2025-36356 - CVSS 9.3 (critical), 2025-10-06: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated…
CVE-2025-0163 - CVSS 5.3 (medium), 2025-06-11: IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response…
CVE-2024-45657 - CVSS 6.7 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect…
CVE-2024-43187 - CVSS 7.5 (high), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel…
CVE-2024-40700 - CVSS 6.1 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated…
CVE-2024-45659 - CVSS 5.3 (medium), 2025-02-04: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed…
CVE-2024-45647 - CVSS 9.8 (critical), 2025-01-20: IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change…
CVE-2024-35141 - CVSS 7.8 (high), 2024-12-19: IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges.
CVE-2024-35133 - CVSS 8.2 (high), 2024-08-29: IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect…
CVE-2024-35139 - CVSS 6.2 (medium), 2024-06-28: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect…
CVE-2024-35137 - CVSS 6.2 (medium), 2024-06-28: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration…
CVE-2023-30998 - CVSS 7.8 (high), 2024-06-27: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID:…
CVE-2023-38370 - CVSS 7.5 (high), 2024-06-27: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the network to install malicious packages.…
CVE-2023-38368 - CVSS 5.5 (medium), 2024-06-27: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could disclose sensitive information to a local user to do improper permission controls. IBM…
CVE-2023-30997 - CVSS 7.8 (high), 2024-06-27: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID:…
CVE-2023-38371 - CVSS 7.5 (high), 2024-06-27: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2024-35142 - CVSS 8.4 (high), 2024-05-31: IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM…
CVE-2024-35140 - CVSS 7.8 (high), 2024-05-31: IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM…
CVE-2024-25027 - CVSS 6.2 (medium), 2024-03-31: IBM Security Verify Access 10.0.6 could disclose sensitive snapshot information due to missing encryption. IBM X-Force ID: 281607.
CVE-2023-43017 - CVSS 8.2 (high), 2024-02-07: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that could allow remote access. IBM X-Force…
CVE-2023-38369 - CVSS 7.5 (high), 2024-02-07: IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it…
CVE-2023-32328 - CVSS 9.8 (critical), 2024-02-07: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of…
CVE-2023-31002 - CVSS 5.5 (medium), 2024-02-07: IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM…
CVE-2023-32330 - CVSS 9.8 (critical), 2024-02-07: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure calls that could allow an attacker on the network to take control of the server. IBM…
CVE-2023-43016 - CVSS 7.3 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-31004 - CVSS 9 (critical), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-32327 - CVSS 7.1 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-31006 - CVSS 7.5 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-31005 - CVSS 7.8 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-32329 - CVSS 6.2 (medium), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-30999 - CVSS 7.5 (high), 2024-02-03: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through…
CVE-2023-31003 - CVSS 8.4 (high), 2024-01-11: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could…
CVE-2023-31001 - CVSS 5.5 (medium), 2024-01-11: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1)…
CVE-2023-38267 - CVSS 6.2 (medium), 2024-01-11: IBM Security Access Manager Appliance (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could…
CVE-2023-30433 - CVSS 6.5 (medium), 2023-07-19: IBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…
CVE-2022-36775 - CVSS 6.5 (medium), 2023-02-17: IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, caused by improper validation of input…
CVE-2021-39070 - CVSS 9.8 (critical), 2022-02-02: IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to…
CVE-2021-20534 - CVSS 4.5 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to…
CVE-2021-29742 - CVSS 8 (high), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 201483.
CVE-2021-20533 - CVSS 8.4 (high), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially…
CVE-2021-29699 - CVSS 6.8 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an…
CVE-2021-20537 - CVSS 6.5 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound…
CVE-2021-20496 - CVSS 4.9 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to improper input validation. IBM X-Force ID: 197966.
CVE-2021-20499 - CVSS 2.7 (low), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in…
CVE-2021-20511 - CVSS 5.2 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL…
CVE-2021-20498 - CVSS 5.3 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system. IBM X-Force…
CVE-2021-20510 - CVSS 6.8 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 198299
CVE-2021-20524 - CVSS 4.8 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2021-20497 - CVSS 7.5 (high), 2021-07-15: IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2021-20500 - CVSS 4.4 (medium), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local privileged user. IBM X-Force ID: 197980.
CVE-2021-20523 - CVSS 2.7 (low), 2021-07-15: IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in…
CVE-2021-20439 - CVSS 7.5 (high), 2021-07-15: IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized…