Known vulnerabilities in Security Verify Privilege On-Premises

Vendor: IBM Corporation
Software: Security Verify Privilege On-Premises
Software CPE: cpe:2.3:a:ibm_corporation:security_verify_privilege_on-premises:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 21
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Security Verify Privilege On-Premises Security Verify Privilege On-Premises is affected by 21 known vulnerabilities: 1 high, 12 medium, 8 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88838 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31887		 CWE-200 Medium
No
No
 11.6.26 19.04.2024 SB2024041921
#VU86176 - Missing Encryption of Sensitive Data
CVE-2022-22386		 CWE-311 Medium
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86175 - Improper input validation
CVE-2022-22384		 CWE-20 Low
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86174 - Missing Encryption of Sensitive Data
CVE-2022-22377		 CWE-311 Medium
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86173 - Information Exposure Through an Error Message
CVE-2022-43891		 CWE-209 Medium
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86172 - Improper Certificate Validation
CVE-2022-43892		 CWE-295 Medium
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86171 - Resource exhaustion
CVE-2022-43893		 CWE-400 Low
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86169 - Exposure of sensitive information to an unauthorized actor
CVE-2022-43889		 CWE-200 Medium
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86166 - Improper input validation
CVE-2021-29913		 CWE-20 Low
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86165 - Improper Certificate Validation
CVE-2022-22380		 CWE-295 Low
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86164 - Unrestricted Upload of File with Dangerous Type
CVE-2022-22375		 CWE-434 Medium
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86161 - Insufficient Session Expiration
CVE-2021-20581		 CWE-613 Low
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86127 - Exposure of sensitive information to an unauthorized actor
CVE-2021-38859		 CWE-200 Medium
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU86126 - Cleartext Transmission of Sensitive Information
CVE-2022-22385		 CWE-319 Medium
No
No
 11.5.0.2 06.02.2024 SB2024020623
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 11.5.0.2 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU68896 - Memory corruption
CVE-2022-3786		 CWE-119 Medium
Available
No
 11.5.0.2 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 44 more
#VU68895 - Memory corruption
CVE-2022-3602		 CWE-119 High
Available
No
 11.5.0.2 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 45 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 11.5.0.2 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 11.5.0.2 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU22273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16728		 CWE-79 Low
No
No
 11.5.0.2 24.10.2019 SB2019102414
SB2023033138
SB2024020623


Showing elements 1 - 20 out of 21