Known vulnerabilities in IBM Security Verify Bridge

Vendor: IBM Corporation
Software: IBM Security Verify Bridge
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_bridge:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 19
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Bridge IBM Security Verify Bridge is affected by 19 known vulnerabilities: 2 high, 12 medium, 5 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76594 - Cleartext Storage of Sensitive Information
CVE-2021-20434		 CWE-312 Low
No
No
 - 29.05.2023 SB2021122237
#VU76593 - Improper Certificate Validation
CVE-2021-38864		 CWE-295 Medium
No
No
 - 29.05.2023 SB2021122237
#VU76592 - Improper Certificate Validation
CVE-2021-20435		 CWE-295 Low
No
No
 - 29.05.2023 SB2021122237
#VU68897 - Resource exhaustion
CVE-2022-32149		 CWE-400 Medium
No
No
 1.0.13, 1.0.13.0 01.11.2022 SB2022110139
SB2022110140
SB2022110142
and 68 more
#VU68376 - Integer overflow
CVE-2022-3515		 CWE-190 High
No
No
 1.0.13.0 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 1.0.13.0 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU67529 - Insufficiently Protected Credentials
CVE-2021-38863		 CWE-522 Low
No
No
 - 21.09.2022 SB2022092106
#VU66757 - Use After Free
CVE-2022-2526		 CWE-416 Medium
No
No
 1.0.13.0 25.08.2022 SB2022082509
SB2022082511
SB2022082531
and 48 more
#VU64713 - Out-of-bounds read
CVE-2022-2175		 CWE-125 Low
No
No
 1.0.13.0 27.06.2022 SB2022062719
SB2022080610
SB2022082104
and 19 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449		 CWE-476 Medium
Available
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU51266 - Cryptographic Issues
CVE-2021-20441		 CWE-310 Medium
No
No
 - 08.03.2021 SB2021030809
#VU51265 - Use of Hard-coded Credentials
CVE-2021-20442		 CWE-798 Medium
No
No
 - 08.03.2021 SB2021030809
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50744 - Cryptographic Issues
CVE-2021-23839		 CWE-310 Low
No
No
 - 17.02.2021 SB2021021702
SB2021041501
SB2021041502
and 15 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU48579 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-28928		 CWE-835 Medium
No
No
 - 20.11.2020 SB2020112013
SB2020112104
SB2020112617
and 10 more