Security Verify Governance (Ibm) - vulnerabilities (CVEs)

28 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2025-08-28. Vendor: Ibm.

CVEs of Security Verify Governance

CVE-2025-36003 - CVSS 7.5 (high), 2025-08-28: IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages…
CVE-2024-22330 - CVSS 9.8 (critical), 2025-06-06: IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise…
CVE-2023-33844 - CVSS 5.4 (medium), 2025-04-09: IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-33838 - CVSS 4.9 (medium), 2025-01-29: IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password,…
CVE-2023-35017 - CVSS 5.9 (medium), 2025-01-29: IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the…
CVE-2023-35888 - CVSS 5.9 (medium), 2024-03-20: IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict…
CVE-2023-33840 - CVSS 4.8 (medium), 2023-10-23: IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2022-22466 - CVSS 9.8 (critical), 2023-10-23: IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound…
CVE-2023-33839 - CVSS 8.8 (high), 2023-10-23: IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted…
CVE-2023-33837 - CVSS 7.5 (high), 2023-10-23: IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before storage or transmission. IBM X-Force ID: 256020.
CVE-2023-33836 - CVSS 9.8 (critical), 2023-10-16: IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound…
CVE-2023-35013 - CVSS 4.4 (medium), 2023-10-16: IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID:…
CVE-2023-35018 - CVSS 7.2 (high), 2023-10-16: IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382.
CVE-2023-35019 - CVSS 8.8 (high), 2023-07-31: IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a…
CVE-2023-35016 - CVSS 6.5 (medium), 2023-07-31: IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially…
CVE-2022-22462 - CVSS 7.5 (high), 2023-01-26: IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an…
CVE-2022-22470 - CVSS 5.5 (medium), 2023-01-09: IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225232.
CVE-2022-22449 - CVSS 5.3 (medium), 2022-12-24: IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message…
CVE-2022-22458 - CVSS 6.5 (medium), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM…
CVE-2022-22457 - CVSS 5.3 (medium), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a…
CVE-2022-22456 - CVSS 6.1 (medium), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
CVE-2022-35646 - CVSS 5.9 (medium), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access…
CVE-2022-22461 - CVSS 7.5 (high), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2022-22455 - CVSS 9.8 (critical), 2022-08-17: IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum…
CVE-2022-22453 - CVSS 7.5 (high), 2022-07-14: IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2022-22452 - CVSS 7.5 (high), 2022-07-14: IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.…
CVE-2022-22450 - CVSS 3.8 (low), 2022-07-14: IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extension security in an HTTP request. IBM…
CVE-2022-22460 - CVSS 7.5 (high), 2022-07-14: IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be used in further attacks against the…