Known vulnerabilities in IBM Security Verify Governance 10.0.1.0.1

Vendor: IBM Corporation
Software: IBM Security Verify Governance
Version: 10.0.1.0.1
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Security Verify Governance version 10.0.1.0.1 IBM Security Verify Governance 10.0.1.0.1 is affected by 10 vulnerabilities: 3 high, 7 medium Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 10.0.1.0.3 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197		 CWE-89 High
No
No
 10.0.1.0.3 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU65486 - Improper input validation
CVE-2022-24839		 CWE-20 Medium
No
No
 10.0.1.0.3 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU64063 - Out-of-bounds write
CVE-2022-28734		 CWE-787 Medium
No
No
 10.0.1.0.3 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 36 more
#VU64062 - Integer underflow
CVE-2022-28733		 CWE-191 High
No
No
 10.0.1.0.3 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 38 more
#VU62716 - Improper input validation
CVE-2022-26520		 CWE-20 High
No
No
 10.0.1.0.3 02.05.2022 SB2022050206
SB2022061311
SB2022062202
and 13 more
#VU62714 - Improper Initialization
CVE-2022-21724		 CWE-665 Medium
No
No
 10.0.1.0.3 02.05.2022 SB2022050205
SB2022062202
SB2022062204
and 18 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Public exploit available
No
 10.0.1.0.3 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU56685 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40528		 CWE-327 Medium
No
No
 10.0.1.0.3 17.09.2021 SB2021091710
SB2021091711
SB2021091629
and 44 more
#VU41479 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-13692		 CWE-611 Medium
No
No
 10.0.1.0.3 10.08.2020 SB2020060439
SB2020081017
SB2020081018
and 13 more