IBM Security Verify Access Docker

• CVE-2025-36354 High 7.3 IBM Security Verify Access command execution 0.3%
• CVE-2025-36355 High 8.5 IBM Security Verify Access code execution 0.2%
• CVE-2025-36356 Critical 9.3 IBM Security Verify Access privilege escalation 0.2%
• CVE-2025-0163 Medium 5.3 IBM Security Verify Access information disclosure 0.3%
• CVE-2024-45647 Medium 5.6 IBM Security Verify Access unverified password change 0.3%
• CVE-2024-35141 High 7.8 IBM Security Verify Access privilege escalation 0.2%
• CVE-2024-35133 Medium 6.8 IBM Security Verify Access HTTP open redirect 1.8%
• CVE-2024-35139 Medium 6.2 IBM Security Access Manager Docker information disclosure 0.2%
• CVE-2024-35137 Medium 6.2 IBM Security Access Manager Docker information disclosure 0.3%
• CVE-2024-35142 High 8.4 IBM Security Verify Access privilege escalation 0.2%
• CVE-2024-35140 High 7.7 IBM Security Verify Access privilege escalation 0.1%
• CVE-2024-25027 Medium 6.2 IBM Security Verify Access Container information disclosure 0.1%
• CVE-2023-38369 Medium 6.2 IBM Security Access Manager Container information disclosure 0.5%
• CVE-2023-31002 Medium 5.1 IBM Security Access Manager Container information disclosure 0.1%
• CVE-2023-43017 High 8.2 IBM Security Verify Access man in the middle 0.6%
• CVE-2023-32330 High 7.5 IBM Security Verify Access man in the middle 0.9%
• CVE-2023-32328 High 7.5 IBM Security Verify Access information disclosure 0.6%
• CVE-2023-31006 Medium 6.5 IBM Security Access Manager Container denial of service 0.9%
• CVE-2023-31004 High 8.3 IBM Security Access Manager Container gain access 1.0%
• CVE-2023-32329 Medium 6.2 IBM Security Access Manager Container improper file validation 0.2%
• CVE-2023-32327 High 7.1 IBM Security Access Manager Container XML external entity injection 1.0%
• CVE-2023-43016 High 7.3 IBM Security Access Manager Container unauthorized access 0.7%
• CVE-2023-30999 High 7.5 IBM Security Access Manager denial of service 1.0%
• CVE-2023-31005 Medium 6.2 IBM Security Access Manager Container privilege escalation 0.2%
• CVE-2023-38267 Medium 6.2 IBM Security Access Manager Appliance information disclosure 0.1%
• CVE-2023-31001 Medium 5.1 IBM Security Access Manager Container information disclosure 0.2%
• CVE-2023-31003 High 8.4 IBM Security Access Manager Container privilege escalation 0.2%
• CVE-2023-30433 Medium 6.5 IBM Security Verify Access HTTP open redirect 0.4%
• CVE-2021-29742 High 7.9 IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 201483. 0.4%
• CVE-2021-29699 Medium 6.6 IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user. IBM X-Force ID: 200600. 0.9%
• CVE-2021-20537 Medium 6.5 IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external 0.7%
• CVE-2021-20534 Medium 4.5 IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remot 0.5%
• CVE-2021-20533 High 8.4 IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 198813 1.8%
• CVE-2021-20524 Medium 4.8 IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionalit 0.5%
• CVE-2021-20523 Low 2.7 IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be use 1.0%
• CVE-2021-20511 Medium 5.2 IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/.. 1.9%
• CVE-2021-20510 Medium 6.8 IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 198299 0.5%
• CVE-2021-20500 Medium 4.4 IBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local privileged user. IBM X-Force ID: 197980. 0.3%
• CVE-2021-20499 Low 2.7 IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be use 1.0%
• CVE-2021-20498 Medium 5.3 IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system. IBM X-Force ID: 197972. 0.9%
• CVE-2021-20497 Medium 5.9 IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 197969 0.7%
• CVE-2021-20496 Low 2.7 IBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to improper input validation. IBM X-Force ID: 197966. 0.6%
• CVE-2021-20439 High 7.5 IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user. 1.2%