16738 matches found
PT-2026-92149
IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests...
CVE-2026-83028: Improper Access Control
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...
PT-2026-92551
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attach...
PT-2026-92147
IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...
PT-2026-92144
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
PT-2026-92154
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
PT-2026-92891
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...
PT-2026-92143
IBM Verify Identity Access containers may not apply management password change operations correctly...
CVE-2026-76081
ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...
CVE-2026-76081 ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions
ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...
EUVD-2026-42967
ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange...
CVE-2026-13277
IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web si...
CVE-2026-13260
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
CVE-2026-13272
IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems...
CVE-2026-13276
IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001...
CVE-2026-13260 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
EUVD-2026-78080
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
CVE-2026-13260
IBM Verify Identity Access and IBM Security Verify Access are affected by a vulnerability where a remote attacker could cause a denial of service . The root cause is the insufficient validation of incoming request resources , specifically involving the allocation of resources without limits or th...
CVE-2026-13272 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems...