IBM Security Verify Access

• CVE-2026-1346 Critical 9.3 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 0.2%
• CVE-2026-1343 High 7.2 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 0.2%
• CVE-2026-1342 High 8.5 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 0.2%
• CVE-2026-2475 Low 3.1 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 0.3%
• CVE-2026-1491 Medium 5.3 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 0.4%
• CVE-2026-2862 Medium 5.3 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 0.4%
• CVE-2026-1345 High 7.3 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 0.4%
• CVE-2026-4101 High 8.1 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 0.4%
• CVE-2026-4364 Medium 5.4 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access <0.1%
• CVE-2025-36087 High 8.1 IBM Security Verify Access hard coded credentials 0.3%
• CVE-2025-0163 Medium 5.3 IBM Security Verify Access information disclosure 0.3%
• CVE-2025-0161 High 7.8 IBM Security Verify Access Appliance code injection 0.2%
• CVE-2024-45647 Medium 5.6 IBM Security Verify Access unverified password change 0.3%
• CVE-2024-49804 High 7.8 IBM Security Verify Access Appliance privilege escalation 0.2%
• CVE-2024-49806 Critical 9.4 IBM Security Verify Access Appliance hard coded credentials 0.3%
• CVE-2024-49805 Critical 9.4 IBM Security Verify Access Appliance hard coded credentials 0.3%
• CVE-2024-49803 Critical 9.8 IBM Security Verify Access Appliance command execution 0.8%
• CVE-2024-35133 Medium 6.8 IBM Security Verify Access HTTP open redirect 1.8%
• CVE-2023-30430 Medium 5.5 IBM Security Verify Access information disclosure 0.2%
• CVE-2024-31883 Medium 5.3 IBM Security Verify Access denial of service 0.6%
• CVE-2022-43868 Medium 5.3 IBM Security Verify Access information disclosure 0.5%
• CVE-2022-43740 High 7.5 IBM Security Verify Access denial of service 1.0%
• CVE-2023-25927 Medium 6.5 IBM Security Verify Access denial of service 1.5%
• CVE-2022-36775 Medium 6.5 IBM Security Verify Access HOST header injection 0.4%
• CVE-2022-22465 Medium 6.3 IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due to improper access permissions. IBM X-Force ID: 225082. 0.2%
• CVE-2022-22464 Medium 5.9 IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information 0.7%
• CVE-2022-22463 Medium 5.4 IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the at 1.0%
• CVE-2022-22370 Medium 5.4 IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alter 0.5%
• CVE-2022-22311 Medium 4.8 IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation of JWT tokens. 0.7%
• CVE-2021-38957 Low 3.1 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040. 1.0%
• CVE-2021-38956 Medium 5.3 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in further attacks against the system. IBM X-Force ID: 212038 0.9%
• CVE-2021-38921 Medium 5.9 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210067. 0.7%
• CVE-2021-38895 Low 3.0 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu 0.5%
• CVE-2021-38894 Low 2.7 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information co 1.0%
• CVE-2021-29665 Critical 9.0 IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elev 1.1%
• CVE-2021-20585 Medium 5.3 IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system. IBM X-Force ID: 199398. 1.0%
• CVE-2021-20576 High 7.5 IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash. 2.5%
• CVE-2021-20575 Medium 4.0 IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system. X-Force ID: 199278. 0.3%
• CVE-2020-4499 High 7.3 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applicatio 1.2%
• CVE-2020-4699 Medium 5.3 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the sys 0.5%
• CVE-2020-4661 Medium 5.3 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the sys 0.5%
• CVE-2020-4660 Medium 5.3 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the sys 0.5%