Security Verify Information Queue (Ibm) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2025-09-10. Vendor: Ibm.

CVEs of Security Verify Information Queue

• CVE-2024-45671 - CVSS 7.5 (high), 2025-09-10: IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 uses weaker than expected cryptographic algorithms that could allow an attacker to…
• CVE-2024-47120 - CVSS 6.8 (medium), 2025-09-10: IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the…
• CVE-2024-45669 - CVSS 6.5 (medium), 2025-09-10: IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of…
• CVE-2023-33834 - CVSS 5.3 (medium), 2023-08-31: IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks…
• CVE-2023-33835 - CVSS 7.5 (high), 2023-08-31: IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks…
• CVE-2023-33833 - CVSS 3.3 (low), 2023-08-31: IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be read by a local user. IBM X-Force ID:…
• CVE-2022-35286 - CVSS 8.8 (high), 2022-07-26: IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
• CVE-2022-35288 - CVSS 6.5 (medium), 2022-07-25: IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM…
• CVE-2022-35287 - CVSS 7.5 (high), 2022-07-25: IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound…
• CVE-2022-35285 - CVSS 8.8 (high), 2022-07-25: IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
• CVE-2022-35284 - CVSS 7.5 (high), 2022-07-25: IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM…
• CVE-2022-35283 - CVSS 6.5 (medium), 2022-07-14: IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request.
• CVE-2021-20411 - CVSS 8.1 (high), 2021-02-12: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session…
• CVE-2021-20410 - CVSS 5.3 (medium), 2021-02-12: IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the…
• CVE-2021-20412 - CVSS 7.5 (high), 2021-02-12: IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
• CVE-2021-20407 - CVSS 7.5 (high), 2021-02-12: IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system.…
• CVE-2021-20406 - CVSS 4.9 (medium), 2021-02-12: IBM Security Verify Information Queue 1.0.6 and 1.0.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
• CVE-2021-20409 - CVSS 7.5 (high), 2021-02-12: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable…
• CVE-2021-20408 - CVSS 7.1 (high), 2021-02-12: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage of a plaintext…
• CVE-2021-20404 - CVSS 5.3 (medium), 2021-02-11: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could…
• CVE-2021-20403 - CVSS 8.8 (high), 2021-02-11: IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
• CVE-2021-20402 - CVSS 2.7 (low), 2021-02-11: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is…
• CVE-2021-20405 - CVSS 7.5 (high), 2021-02-11: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to improper encoding of output. IBM X-Force…