Security Verify Governance@10.0.1 Security Vulnerabilities and Issues — Security Verify Governance@10.0.1 CVE List

Lucene search

IbmSecurity Verify Governance10.0.1

9 matches found

CVE•added 2023/01/26 9:15 p.m.•61 views

CVE-2022-22462

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078.

7.5CVSS5.4AI score0.00033EPSS

CVE•added 2022/12/24 12:15 a.m.•60 views

CVE-2022-22449

IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 224915.

5.3CVSS4.8AI score0.00049EPSS

CVE•added 2022/12/22 8:15 p.m.•54 views

CVE-2022-35646

IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096.

5.9CVSS5AI score0.00028EPSS

CVE•added 2022/12/22 10:15 p.m.•52 views

CVE-2022-22457

IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 225007.

5.3CVSS4.2AI score0.00009EPSS

CVE•added 2022/12/22 10:15 p.m.•51 views

CVE-2022-22456

IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

6.1CVSS4.8AI score0.00094EPSS

CVE•added 2022/12/22 10:15 p.m.•51 views

CVE-2022-22458

IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009.

6.5CVSS5.8AI score0.00031EPSS

CVE•added 2022/12/22 8:15 p.m.•49 views

CVE-2022-22461

IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225007.

7.5CVSS6.2AI score0.00033EPSS

CVE•added 2023/10/23 8:15 p.m.•49 views

CVE-2023-33839

IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036.

8.8CVSS7.9AI score0.00101EPSS

CVE•added 2023/10/23 8:15 p.m.•39 views

CVE-2023-33840

IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256037.

4.8CVSS4.8AI score0.00057EPSS