Known vulnerabilities in IBM Security Verify Access - page 9

Software CPE: cpe:2.3:a:ibm_corporation:security_access_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Access IBM Security Verify Access is affected by 224 known vulnerabilities: 28 high, 133 medium, 63 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66757 - Use After Free
CVE-2022-2526
CWE-416 Medium
No
No
10.0.5.0 25.08.2022 SB2022082509
SB2022082511
SB2022082531
and 48 more
#VU64997 - Cryptographic Issues
CVE-2010-4020
CWE-310 Low
No
No
10.0.4.0 07.07.2022 SB2022070719
#VU64989 - Cryptographic Issues
CVE-2010-1323
CWE-310 Low
No
No
10.0.4.0 07.07.2022 SB2022070719
SB2011011904
#VU64988 - Cryptographic Issues
CVE-2010-1324
CWE-310 High
No
No
10.0.4.0 07.07.2022 SB2022070719
SB2011011904
#VU64985 - Configuration
CVE-2010-4021
CWE-16 Low
No
No
10.0.4.0 07.07.2022 SB2022070719
#VU64983 - Reachable Assertion
CVE-2017-11692
CWE-617 Medium
No
No
10.0.4.0 07.07.2022 SB2022070719
SB2020072613
SB2025111488
and 2 more
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903
CWE-122 High
No
No
10.0.5.0 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU60986 - Improper input validation
CVE-2020-28491
CWE-20 Medium
No
No
- 03.03.2022 SB2022030316
SB2022030322
SB2022062413
and 12 more
#VU55372 - Improper input validation
CVE-2021-27568
CWE-20 High
No
No
- 27.07.2021 SB2021072765
SB2021081922
SB2022011837
and 11 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425
CWE-22 Low
No
No
- 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649
CWE-611 Medium
No
No
- 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU48436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25695
CWE-89 Medium
No
No
- 16.11.2020 SB2020111609
SB2020111711
SB2020111816
and 33 more
#VU48437 - Improper Access Control
CVE-2020-25694
CWE-284 Medium
No
No
- 16.11.2020 SB2020111609
SB2020111711
SB2020111815
and 35 more
#VU47481 - Improper input validation
CVE-2020-13956
CWE-20 Medium
No
No
- 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU20003 - Permissions, Privileges, and Access Controls
CVE-2019-10208
CWE-264 Low
No
No
- 08.08.2019 SB2019080820
SB2019080904
SB2019080905
and 27 more
#VU17350 - Reachable Assertion
CVE-2018-20217
CWE-617 Low
No
No
10.0.4.0 01.02.2019 SB2019012517
SB2019011813
SB2019090310
and 9 more
#VU36239 - Memory corruption
CVE-2019-6285
CWE-119 Medium
No
No
10.0.4.0 14.01.2019 SB2018122811
SB2022070719
SB2022040117
and 4 more
#VU36262 - Memory corruption
CVE-2018-20573
CWE-119 Medium
No
No
10.0.4.0 28.12.2018 SB2018122811
SB2022070719
SB2022040117
and 4 more
#VU36263 - Memory corruption
CVE-2018-20574
CWE-119 Medium
No
No
10.0.4.0 28.12.2018 SB2018122811
SB2022070719
SB2022040117
and 4 more
#VU11076 - Permissions, Privileges, and Access Controls
CVE-2018-5730
CWE-264 Low
No
No
10.0.4.0 14.03.2018 SB2018011212
SB2018060602
SB2019012506
and 5 more


Showing elements 161 - 180 out of 224