Security Verify Governance

security_verify_governance

Vendor: Ibm • 28 CVEs

CVEs (28)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-36003 1Ibm 1Security Verify Governance Sep 16, 2025 Aug 28, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks...Show more IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system.Show less
CVE-2024-22330 1Ibm 1Security Verify Governance Jul 14, 2025 Jun 6, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
CVE-2023-33844 1Ibm 1Security Verify Governance Jul 16, 2025 Apr 9, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading t...Show more IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2023-33838 1Ibm 1Security Verify Governance Mar 4, 2025 Jan 29, 2025 N/A· v4 4.9 MEDIUM· v3 N/A· v2 IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input...Show more IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input.Show less
CVE-2023-35017 1Ibm 1Security Verify Governance Mar 4, 2025 Jan 29, 2025 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.
CVE-2023-35888 1Ibm 1Security Verify Governance Jan 27, 2025 Mar 20, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability t...Show more IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 258375.Show less
CVE-2023-33840 1Ibm 1Security Verify Governance Nov 21, 2024 Oct 23, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...Show more IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256037.Show less
CVE-2023-33839 1Ibm 1Security Verify Governance Nov 21, 2024 Oct 23, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036.
CVE-2023-33837 1Ibm 1Security Verify Governance Nov 21, 2024 Oct 23, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before storage or transmission. IBM X-Force ID: 256020.
CVE-2022-22466 1Ibm 1Security Verify Governance Nov 21, 2024 Oct 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption...Show more IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 225222.Show less
CVE-2023-33836 1Ibm 1Security Verify Governance Nov 21, 2024 Oct 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption...Show more IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 256016.Show less
CVE-2023-35018 1Ibm 1Security Verify Governance Nov 21, 2024 Oct 16, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382.
CVE-2023-35013 1Ibm 1Security Verify Governance Nov 21, 2024 Oct 16, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769.
CVE-2023-35019 1Ibm 1Security Verify Governance Nov 21, 2024 Jul 31, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873.
CVE-2023-35016 1Ibm 1Security Verify Governance Nov 21, 2024 Jul 31, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to v...Show more IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 257772.Show less
CVE-2022-22462 1Ibm 1Security Verify Governance Nov 21, 2024 Jan 26, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID...Show more IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078. Show less
CVE-2022-22470 1Ibm 1Security Verify Governance Nov 21, 2024 Jan 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225232.
CVE-2022-22449 1Ibm 1Security Verify Governance Nov 21, 2024 Dec 24, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...Show more IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 224915.Show less
CVE-2022-22458 1Ibm 1Security Verify Governance Nov 21, 2024 Dec 22, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009.
CVE-2022-22457 1Ibm 1Security Verify Governance Nov 21, 2024 Dec 22, 2022 N/A· v4 4.4 MEDIUM· v3 N/A· v2 IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 225007.

12 Next