VI
Product
Verify Identity Access Digital Credentials
143
CVEs
0
On KEV
10.0
Max CVSS
23
New 30D
Severity mix
Critical 17High 61Medium 59Low 6
Watch
Add Verify Identity Access Digital Credentials to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29699 | 6.8 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user Affected: 10.0.0 |
| CVE-2024-45657 | 6.7 | Feb 4 | IBM Security Verify Access incorrect privilege assignment Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2026-19494 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-78399 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-19878 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11927 | 6.5 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-4938 | 6.5 | Jul 17 | Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-5926 | 6.5 | Apr 22 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-56343 | 6.5 | Jun 6 | IBM Verify Identity Access Digital Credentials denial of service Affected: 24.06 |
| CVE-2024-35138 | 6.5 | Feb 4 | IBM Security Verify Access cross-site request forgery Affected: 10.0.0 through 10.0.8 |
| CVE-2022-36775 | 6.5 | Feb 17 | IBM Security Verify Access HOST header injection Affected: 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, 10.0.4.0 |
| CVE-2022-22463 | 6.5 | Jul 8 | IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2022-22311 | 6.5 | Mar 31 | IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation… Affected: 10.0.0; 10.0.1; 10.0.2; 10.0.3 |
| CVE-2021-20537 | 6.5 | Jul 15 | IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound… Affected: 10.0.0 |
| CVE-2026-17189 | 6.1 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-13276 | 6.1 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-7364 | 6.1 | Jul 17 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-40700 | 6.1 | Feb 4 | IBM Security Verify Access cross-site scripting Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2019-4552 | 6.1 | Oct 15 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks Affected: 10.0.0 before 10.0.0.1 |
| CVE-2024-31883 | 5.9 | Jun 27 | IBM Security Verify Access denial of service Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2023-30430 | 5.5 | Jun 27 | IBM Security Verify Access information disclosure Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2024-31874 | 5.5 | Apr 10 | IBM Security Verify Access Appliance denial of service Affected: 10.0.0 through 10.0.7 |
| CVE-2024-25027 | 5.5 | Mar 31 | IBM Security Verify Access Container information disclosure Affected: 10.0.6 |
| CVE-2023-32329 | 5.5 | Feb 3 | IBM Security Access Manager Container improper file validation Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-38267 | 5.5 | Jan 11 | IBM Security Access Manager Appliance information disclosure Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-31001 | 5.5 | Jan 11 | IBM Security Access Manager Container information disclosure Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2026-16830 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11936 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-78407 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-13272 | 5.4 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-4364 | 5.4 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-28772 | 5.4 | Jul 25 | IBM Security Directory Integrator cross-site scripting Affected: 10.0.0 |
| CVE-2023-30433 | 5.4 | Jul 19 | IBM Security Verify Access HTTP open redirect Affected: 10.0.0 |
| CVE-2022-22370 | 5.4 | Jul 8 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2021-38895 | 5.4 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2026-11939 | 5.3 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-12091 | 5.3 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11904 | 5.3 | Jul 30 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-8861 | 5.3 | Jul 17 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-1491 | 5.3 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-2862 | 5.3 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2025-0163 | 5.3 | Jun 11 | IBM Security Verify Access information disclosure Affected: 10.0 through 10.0.8 |
| CVE-2024-56342 | 5.3 | Jun 6 | IBM Verify Identity Access Digital Credentials information disclosure Affected: 24.06 |
| CVE-2024-45658 | 5.3 | Feb 4 | IBM Security Verify Access information disclosure Affected: 10.0.0 through 10.0.8 |
| CVE-2024-45659 | 5.3 | Feb 4 | IBM Security Verify Access information disclosure Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2022-43868 | 5.3 | Oct 14 | IBM Security Verify Access information disclosure Affected: OIDC Provider |
| CVE-2021-38956 | 5.3 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in further attacks against the system Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2021-20498 | 5.3 | Jul 15 | IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system Affected: 10.0.0 |
| CVE-2021-20585 | 5.3 | Jun 1 | IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system Affected: 20.07 |
| CVE-2020-4699 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 10.0.0 |