IBM Security Verify Governance

• CVE-2024-22330 Medium 5.9 IBM Security Verify Governance information disclosure 0.3%
• CVE-2023-33844 Medium 5.4 IBM Security Verify Governance cross-site scripting 0.2%
• CVE-2023-33838 Medium 4.4 IBM Security Verify Governance information disclosure 0.2%
• CVE-2023-35017 Medium 5.9 IBM Security Verify Governance information 0.2%
• CVE-2023-35888 Medium 5.9 IBM Security Verify Governance information disclosure 0.3%
• CVE-2023-33837 Medium 4.1 IBM Security Verify Governance information disclosure 0.3%
• CVE-2023-33839 High 7.2 IBM Security Verify Governance command execution 1.4%
• CVE-2022-22466 Medium 6.8 IBM Security Verify Governance information disclosure 0.6%
• CVE-2023-33840 Medium 4.8 IBM Security Verify Governance cross-site scripting 0.4%
• CVE-2023-33836 Medium 5.3 IBM Security Verify Governance information disclosure 0.5%
• CVE-2023-35018 Low 3.3 IBM Security Verify Governance file upload 0.4%
• CVE-2023-35013 Low 2.3 IBM Security Verify Governance information disclosure 0.2%
• CVE-2022-22462 Low 3.7 IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure 0.5%
• CVE-2022-22470 Medium 4.1 IBM Security Verify Governance information disclosure 0.1%
• CVE-2022-22455 Low 2.3 IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses 0.5%
• CVE-2022-22460 Low 3.0 IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be used in further attacks against the system. IBM X-Force ID: 225013. 0.7%
• CVE-2022-22453 Medium 5.1 IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 224919. 0.4%
• CVE-2022-22452 Medium 5.3 IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 224918. 1.0%
• CVE-2022-22450 Low 3.8 IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extension security in an HTTP request. IBM X-Force ID: 224916. 0.6%