Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm security verify access 10.0.1.0 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2021-39070
IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an malicious user to authenticate as any user on the system. IBM X-Force ID: 215353.
Ibm Security Verify Access 10.0.0Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0Ibm Security Verify Access Docker 10.0.0Ibm Security Verify Access Docker 10.0.1.0Ibm Security Verify Access Docker 10.0.2.0
6.5
CVSSv3
CVE-2022-36775
IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an malicious user to conduct various attacks against the vulnerable system, includin...
Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0Ibm Security Verify Access Docker 10.0.1.0Ibm Security Verify Access Docker 10.0.2.0Ibm Security Verify Access 10.0.0.0Ibm Security Verify Access 10.0.3.0Ibm Security Verify Access Docker 10.0.4.0Ibm Security Verify Access Docker 10.0.3.0Ibm Security Verify Access 10.0.4.0Ibm Security Verify Access Docker 10.0.0.0
2.7
CVSSv3
CVE-2021-38894
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote malicious user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 209515.
Ibm Security Verify Access 10.0.0Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0
5.4
CVSSv3
CVE-2021-38895
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...
Ibm Security Verify Access 10.0.0Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0
7.5
CVSSv3
CVE-2021-38921
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 210067.
Ibm Security Verify Access 10.0.0Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0
5.3
CVSSv3
CVE-2021-38956
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in further attacks against the system. IBM X-Force ID: 212038
Ibm Security Verify Access 10.0.0Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0
7.5
CVSSv3
CVE-2021-38957
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040.
Ibm Security Verify Access 10.0.0Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0
5.4
CVSSv3
CVE-2022-22370
IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wit...
Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0Ibm Security Verify Access 10.0.0.0Ibm Security Verify Access 10.0.3.0
7.5
CVSSv3
CVE-2022-22464
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 225081.
Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0Ibm Security Verify Access 10.0.0.0Ibm Security Verify Access 10.0.3.0
7.8
CVSSv3
CVE-2022-22465
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due to improper access permissions. IBM X-Force ID: 225082.
Ibm Security Verify Access 10.0.1.0Ibm Security Verify Access 10.0.2.0Ibm Security Verify Access 10.0.0.0Ibm Security Verify Access 10.0.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook