IBM Security Verify Information Queue

• CVE-2024-45671 Medium 5.9 IBM Security Verify Information Queue information disclosure 0.2%
• CVE-2024-45669 Medium 6.5 IBM Security Verify Information Queue denial of service 0.4%
• CVE-2024-47120 Medium 6.4 IBM Security Verify Information Queue code execution 0.2%
• CVE-2023-33835 Medium 4.3 IBM Security Verify Information Queue information disclosure 0.7%
• CVE-2023-33834 Medium 4.3 IBM Security Verify Information Queue information disclosure 0.7%
• CVE-2023-33833 Low 2.9 IBM Security Verify Information Queue information disclosure 0.1%
• CVE-2022-35286 Low 3.1 IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the we 0.3%
• CVE-2022-35288 Medium 5.3 IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 230818. 0.7%
• CVE-2022-35287 Medium 6.8 IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to exter 0.7%
• CVE-2022-35285 Medium 6.5 IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the we 0.4%
• CVE-2022-35284 Medium 5.3 IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811. 0.8%
• CVE-2022-35283 Medium 6.5 IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request. 1.2%
• CVE-2021-20412 Medium 5.9 IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication 0.9%
• CVE-2021-20411 High 7.5 IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force ID: 198191. 0.4%
• CVE-2021-20410 Medium 5.3 IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190. 0.7%
• CVE-2021-20409 Medium 5.9 IBM Security Verify Information Queue information disclosure 1.0%
• CVE-2021-20408 High 7.1 IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage of a plaintext cryptographic key. IBM X-Force ID: 198187. 0.2%
• CVE-2021-20407 Medium 5.3 IBM Security Verify Information Queue information disclosure 0.7%
• CVE-2021-20406 Low 2.2 IBM Security Verify Information Queue information disclosure 0.5%
• CVE-2021-20405 Low 3.1 IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to improper encoding of output. IBM X-Force ID: 196183. 0.8%
• CVE-2021-20404 Low 2.6 IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 19 0.9%
• CVE-2021-20403 Low 3.1 IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user th 0.4%
• CVE-2021-20402 Low 2.7 IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information 1.0%