Known vulnerabilities in IBM Security Verify Access - page 5

Software CPE: cpe:2.3:a:ibm_corporation:security_access_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Access IBM Security Verify Access is affected by 224 known vulnerabilities: 28 high, 133 medium, 63 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU90987 - Improper Link Resolution Before File Access ('Link Following')
CVE-2017-8806
CWE-59 Low
No
No
10.0.7.0 04.06.2024 SB2024060414
#VU88860 - Missing Encryption of Sensitive Data
CVE-2024-25027
CWE-311 Low
No
No
10.0.7.0 22.04.2024 SB2024042205
#VU88121 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-28787
CWE-444 High
No
No
10.0.7.0.1 04.04.2024 SB2024040417
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
10.0.7.0 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
10.0.7.0 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
10.0.7.0 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU76753 - Allocation of Resources Without Limits or Throttling
CVE-2023-28867
CWE-770 Medium
No
No
10.0.7.0 01.06.2023 SB2023060123
SB2023062739
SB2023063014
and 17 more
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
10.0.7.0 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU75266 - Improper input validation
CVE-2023-21968
CWE-20 Low
No
No
10.0.7.0 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU74149 - Security Features
CVE-2023-0466
CWE-254 Low
No
No
10.0.7.0 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465
CWE-347 Low
No
No
10.0.7.0 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
10.0.7.0 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72075 - Insecure Temporary File
CVE-2023-0482
CWE-377 Low
No
No
10.0.7.0 08.02.2023 SB2023020877
SB2023033003
SB2023033004
and 36 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364
CWE-918 Medium
No
No
10.0.7.0 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915
CWE-113 Medium
No
No
10.0.7.0 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823
CWE-378 Low
No
No
10.0.7.0 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
10.0.7.0 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU56064 - Out-of-bounds read
CVE-2021-3712
CWE-125 Medium
No
No
10.0.7.0 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU56063 - Memory corruption
CVE-2021-3711
CWE-119 High
No
No
10.0.7.0 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 53 more
#VU39294 - Memory corruption
CVE-2017-5950
CWE-119 Medium
No
No
10.0.7.0 03.04.2017 SB2017040313
SB2024060414
SB2018091608
and 3 more


Showing elements 81 - 100 out of 224