Known vulnerabilities in IBM Security Verify Access - page 4

Software CPE: cpe:2.3:a:ibm_corporation:security_access_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Access IBM Security Verify Access is affected by 224 known vulnerabilities: 28 high, 133 medium, 63 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102287 - Cleartext Transmission of Sensitive Information
CVE-2023-32328
CWE-319 High
No
No
- 03.01.2025 SB2025010305
SB2025010306
#VU102286 - Improper Certificate Validation
CVE-2023-43017
CWE-295 Medium
No
No
- 03.01.2025 SB2025010304
SB2025010306
#VU101643 - Unverified Password Change
CVE-2024-45647
CWE-620 Medium
No
No
- 11.12.2024 SB2024121128
#VU96718 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-35133
CWE-601 Low
No
No
- 03.09.2024 SB2024090328
#VU88223 - Improper Authentication
CVE-2016-2102
CWE-287 Medium
No
No
10.0.7.0 09.04.2024 SB2017082217
SB2024060414
#VU86309 - Observable discrepancy
CVE-2023-45287
CWE-203 Medium
No
No
10.0.9 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
10.0.9 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803
CWE-200 Medium
No
No
10.0.9 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
10.0.9 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
10.0.9 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319
CWE-79 Medium
No
No
10.0.9 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318
CWE-79 Medium
No
No
10.0.9 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409
CWE-295 Medium
No
No
10.0.9 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU77953 - Resource exhaustion
CVE-2023-1206
CWE-400 Medium
Available
No
- 04.07.2023 SB2023070439
SB2023070445
SB2023082053
and 81 more
#VU71431 - Improper input validation
CVE-2023-0056
CWE-20 Medium
No
No
10.0.7.0 23.01.2023 SB2023012331
SB2023012332
SB2023012641
and 20 more
#VU68389 - Improper input validation
CVE-2022-2880
CWE-20 Medium
No
No
10.0.9 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68387 - Resource Management Errors
CVE-2022-2879
CWE-399 Medium
No
No
10.0.9 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU60166 - Cryptographic Issues
CVE-2021-4160
CWE-310 Low
No
No
10.0.7.0 28.01.2022 SB2022012811
SB2022031611
SB2022042517
and 29 more
#VU56024 - Resource Management Errors
CVE-2021-33198
CWE-399 Medium
No
No
10.0.9 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558
CWE-295 Medium
Available
No
10.0.9 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more


Showing elements 61 - 80 out of 224