Known vulnerabilities in IBM Security Verify Access

Software CPE: cpe:2.3:a:ibm_corporation:security_access_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Access IBM Security Verify Access is affected by 224 known vulnerabilities: 28 high, 133 medium, 63 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114963 - Use After Free
CVE-2025-39698
CWE-416 Low
No
No
- 08.09.2025 SB2025090896
SB2025092303
SB2025092902
and 13 more
#VU114189 - Improper input validation
CVE-2025-38550
CWE-20 Low
No
No
- 18.08.2025 SB2025081870
SB2025091531
SB20250918122
and 47 more
#VU111900 - Out-of-bounds read
CVE-2025-5318
CWE-125 Medium
No
No
- 24.06.2025 SB2025062451
SB2025062454
SB20250704157
and 61 more
#VU106844 - Memory corruption
CVE-2025-21927
CWE-119 Low
No
No
- 02.04.2025 SB20250402107
SB2025042540
SB2025042544
and 49 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176
CWE-121 High
No
No
- 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU105459 - Resource exhaustion
CVE-2025-22869
CWE-400 Low
No
No
- 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465
CWE-300 Medium
No
No
- 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU103980 - Resource exhaustion
CVE-2024-12133
CWE-400 Medium
No
No
- 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087
CWE-22 Medium
No
No
- 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085
CWE-457 Medium
No
No
- 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU99614 - Improper input validation
CVE-2024-50602
CWE-20 Medium
No
No
- 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
- 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU91235 - NULL Pointer Dereference
CVE-2024-35857
CWE-476 Low
No
No
- 05.06.2024 SB2024060576
SB2024070973
SB2024071103
and 22 more
#VU90862 - Use of Uninitialized Resource
CVE-2024-36933
CWE-908 Low
No
No
- 03.06.2024 SB20240603135
SB2024070224
SB20240711162
and 43 more
#VU89587 - Improper Authentication
CVE-2023-51767
CWE-287 Low
No
No
- 16.05.2024 SB2024051617
SB2024061808
SB2024082776
and 5 more
#VU84792 - Inadequate Encryption Strength
CVE-2023-51384
CWE-326 Low
No
No
- 27.12.2023 SB2023121905
SB2023122710
SB2024010337
and 5 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Available
No
- 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU78454 - Untrusted Search Path
CVE-2023-38408
CWE-426 Medium
Available
No
- 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU77351 - Improper input validation
CVE-2023-29499
CWE-20 Medium
No
No
- 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 35 more
#VU2015 - Improper input validation
CVE-2016-10009
CWE-20 Low
Available
No
- 19.12.2016 SB2016122003
SB2017011102
SB2016122004
and 21 more


Showing elements 1 - 20 out of 224