Known vulnerabilities in IBM Security Verify Access - page 8

Software CPE: cpe:2.3:a:ibm_corporation:security_access_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Access IBM Security Verify Access is affected by 224 known vulnerabilities: 28 high, 133 medium, 63 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72071 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36775
CWE-444 Medium
No
No
10.0.5.0 08.02.2023 SB2023020871
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165
CWE-444 Medium
No
No
10.0.5.0 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU65845 - Authentication Bypass by Spoofing
CVE-2022-22476
CWE-290 Medium
No
No
10.0.5.0 28.07.2022 SB2022072816
SB2022080903
SB2022082228
and 29 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
10.0.5.0 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64909 - Improper Verification of Cryptographic Signature
CVE-2022-34903
CWE-347 Medium
No
No
10.0.5.0 04.07.2022 SB2022070429
SB2022070443
SB2022070521
and 58 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
10.0.5.0 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64682 - Resource exhaustion
CVE-2022-32206
CWE-400 Medium
No
No
10.0.5.0 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
10.0.5.0 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64197 - Improper Authentication
CVE-2022-22475
CWE-287 Low
No
No
10.0.5.0 13.06.2022 SB2022061307
SB2022061310
SB2022062218
and 26 more
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012
CWE-401 Medium
No
No
10.0.5.0 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more
#VU64063 - Out-of-bounds write
CVE-2022-28734
CWE-787 Medium
No
No
10.0.5.0 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 36 more
#VU64062 - Integer underflow
CVE-2022-28733
CWE-191 High
No
No
10.0.5.0 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 38 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
10.0.5.0 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776
CWE-200 Low
No
No
10.0.5.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774
CWE-200 Medium
No
No
10.0.5.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU62640 - Improper Authentication
CVE-2022-22576
CWE-287 Medium
No
No
10.0.5.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
10.0.5.0 FP001 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
10.0.5.0 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
10.0.5.0 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60084 - Missing initialization of resource
CVE-2021-28167
CWE-909 Medium
No
No
10.0.5.0 27.01.2022 SB2021042158
SB2022102806
SB2022112426
and 15 more


Showing elements 141 - 160 out of 224