Known vulnerabilities in IBM Security Verify Access - page 7

Software CPE: cpe:2.3:a:ibm_corporation:security_access_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Access IBM Security Verify Access is affected by 224 known vulnerabilities: 28 high, 133 medium, 63 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
10.0.6-ISS-ISVA-FP0000 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU78716 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-30433
CWE-601 Medium
No
No
- 27.07.2023 SB2023072729
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342
CWE-326 Medium
No
No
- 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU76054 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-25927
CWE-444 Medium
No
No
10.0.5.0 FP001 12.05.2023 SB2023051208
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
10.0.5.0 FP001 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916
CWE-770 Medium
No
No
10.0.6.0 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
10.0.6.0 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
10.0.6.0 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
10.0.6.0 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
10.0.6.0 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU70461 - Improper Privilege Management
CVE-2022-4415
CWE-269 Low
No
No
10.0.6.0 21.12.2022 SB2022122140
SB2022122735
SB2022122816
and 70 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946
CWE-276 Low
No
No
10.0.6.0 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU69392 - Resource exhaustion
CVE-2022-45061
CWE-400 Medium
No
No
10.0.5.0 FP001 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU68858 - Off-by-one Error
CVE-2021-46848
CWE-193 Medium
No
No
10.0.5.0 FP001 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68828 - Integer overflow
CVE-2022-40303
CWE-190 High
No
No
10.0.5.0 FP001 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68718 - Use After Free
CVE-2022-43680
CWE-416 Medium
No
No
10.0.6.0 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU67760 - Type conversion
CVE-2020-10735
CWE-704 Medium
No
No
10.0.5.0 FP001 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861
CWE-601 Low
No
No
10.0.5.0 FP001 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737
CWE-129 Medium
Available
No
10.0.6.0 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154
CWE-22 Low
No
No
10.0.5.0 FP001 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more


Showing elements 121 - 140 out of 224