Known vulnerabilities in Verify Identity Access Digital Credentials

Vendor: IBM Corporation
Software: Verify Identity Access Digital Credentials
Software CPE: cpe:2.3:a:ibm_corporation:verify_identity_access_digital_credentials:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 48
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Verify Identity Access Digital Credentials Verify Identity Access Digital Credentials is affected by 48 known vulnerabilities: 8 high, 21 medium, 19 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-56200		 CWE-79 Low
No
No
 - 16.02.2026 SB20260216157
SB20260216158
SB2026021915
and 2 more
#VU117882 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-64118		 CWE-362 Low
No
No
 - 31.10.2025 SB20251031149
SB2025112742
SB2026031939
and 1 more
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59343		 CWE-22 High
No
No
 - 17.10.2025 SB2025101702
SB2025101703
SB2025101704
and 22 more
#VU114963 - Use After Free
CVE-2025-39698		 CWE-416 Low
No
No
 - 08.09.2025 SB2025090896
SB2025092303
SB2025092902
and 13 more
#VU114189 - Improper input validation
CVE-2025-38550		 CWE-20 Low
No
No
 - 18.08.2025 SB2025081870
SB2025091531
SB20250918122
and 47 more
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 - 24.06.2025 SB2025062451
SB2025062454
SB20250704157
and 61 more
#VU106844 - Memory corruption
CVE-2025-21927		 CWE-119 Low
No
No
 - 02.04.2025 SB20250402107
SB2025042540
SB2025042544
and 49 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176		 CWE-121 High
No
No
 - 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 - 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465		 CWE-300 Medium
No
No
 - 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 - 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085		 CWE-457 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 - 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU91235 - NULL Pointer Dereference
CVE-2024-35857		 CWE-476 Low
No
No
 - 05.06.2024 SB2024060576
SB2024070973
SB2024071103
and 22 more
#VU89587 - Improper Authentication
CVE-2023-51767		 CWE-287 Low
No
No
 - 16.05.2024 SB2024051617
SB2024061808
SB2024082776
and 5 more
#VU84792 - Inadequate Encryption Strength
CVE-2023-51384		 CWE-326 Low
No
No
 - 27.12.2023 SB2023121905
SB2023122710
SB2024010337
and 5 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 - 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU78454 - Untrusted Search Path
CVE-2023-38408		 CWE-426 Medium
Available
No
 - 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU2015 - Improper input validation
CVE-2016-10009		 CWE-20 Low
Available
No
 - 19.12.2016 SB2016122003
SB2017011102
SB2016122004
and 21 more


Showing elements 1 - 20 out of 48