Known vulnerabilities in IBM Security Verify Access - page 11

Software CPE: cpe:2.3:a:ibm_corporation:security_access_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Access IBM Security Verify Access is affected by 224 known vulnerabilities: 28 high, 133 medium, 63 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59356 - Exposure of sensitive information to an unauthorized actor
CVE-2021-38957
CWE-200 Medium
No
No
- 10.01.2022 SB2022011038
#VU59355 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38895
CWE-79 Medium
No
No
- 10.01.2022 SB2022011038
#VU59354 - Exposure of sensitive information to an unauthorized actor
CVE-2021-38956
CWE-200 Medium
No
No
- 10.01.2022 SB2022011038
#VU59353 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-38921
CWE-327 Low
No
No
- 10.01.2022 SB2022011038
#VU59352 -
CVE-2021-38894
Medium
No
No
- 10.01.2022 SB2022011038
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104
CWE-502 Medium
No
No
- 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU51456 - Integer overflow
CVE-2021-27219
CWE-190 Low
No
No
- 15.03.2021 SB2021021524
SB2021032305
SB2021053117
and 40 more
#VU51455 - Incorrect Conversion between Numeric Types
CVE-2021-27218
CWE-681 Low
No
No
- 15.03.2021 SB2021021523
SB2021032305
SB2021070711
and 25 more
#VU46905 - Buffer overflow
CVE-2020-8927
CWE-120 Medium
No
No
- 15.09.2020 SB2020092215
SB2020092701
SB2020092704
and 40 more
#VU46737 - Out-of-bounds read
CVE-2020-24977
CWE-125 Medium
No
No
- 04.09.2020 SB2020091517
SB2020091519
SB2020091641
and 33 more
#VU30165 - Out-of-bounds write
CVE-2020-15358
CWE-787 Low
No
No
- 27.06.2020 SB2020062703
SB2020072756
SB2020102002
and 27 more
#VU28227 - Integer overflow
CVE-2020-13434
CWE-190 Medium
No
No
- 25.05.2020 SB2020052519
SB2020080704
SB2020052729
and 27 more
#VU34847 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-4707
CWE-611 Medium
No
No
- 28.01.2020 SB2020012835
#VU18944 - Incorrect Default Permissions
CVE-2019-13012
CWE-276 Low
No
No
- 29.06.2019 SB2019062905
SB2019072003
SB2019091144
and 9 more
#VU15751 - Permissions, Privileges, and Access Controls
CVE-2018-1850
CWE-264 Low
No
No
- 06.11.2018 SB2018110714
#VU14519 - Command injection
CVE-2018-1722
CWE-77 Low
No
No
- 23.08.2018 SB2018082405
#VU10881 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1443
CWE-611 Low
No
No
- 07.03.2018 SB2018030706
SB2018030707
#VU9997 - Permissions, Privileges, and Access Controls
CVE-2017-1459
CWE-264 Low
No
No
- 12.01.2018 SB2018011203
#VU9996 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-1534
CWE-601 Low
No
No
- 12.01.2018 SB2018011203
#VU9995 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1533
CWE-79 Low
No
No
- 12.01.2018 SB2018011203


Showing elements 201 - 220 out of 224