# IBM Security Verify Access. Every CVE that names IBM Security Verify Access among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [IBM Security Verify Access information disclosure](https://agentprime.io/advisories/CVE-2025-0163.md) `CVE-2025-0163` · CVE record: IBM Security Verify Access and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2025 · Tags: CWE-204 - [IBM Security Verify Access Appliance code injection](https://agentprime.io/advisories/CVE-2025-0161.md) `CVE-2025-0161` · CVE record: IBM Security Verify Access · CVSS 7.8 High · Not analysed yet · Published 20 Feb 2025 · Tags: Code injection - [IBM Security Verify Access unverified password change](https://agentprime.io/advisories/CVE-2024-45647.md) `CVE-2024-45647` · CVE record: IBM Security Verify Access and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 20 Jan 2025 · Tags: CWE-620 - [IBM Security Verify Access Appliance privilege escalation](https://agentprime.io/advisories/CVE-2024-49804.md) `CVE-2024-49804` · CVE record: IBM Security Verify Access · CVSS 7.8 High · Not analysed yet · Published 29 Nov 2024 · Tags: Privilege escalation - [IBM Security Verify Access Appliance hard coded credentials](https://agentprime.io/advisories/CVE-2024-49806.md) `CVE-2024-49806` · CVE record: IBM Security Verify Access · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Nov 2024 · Tags: Hard-coded credentials - [IBM Security Verify Access Appliance hard coded credentials](https://agentprime.io/advisories/CVE-2024-49805.md) `CVE-2024-49805` · CVE record: IBM Security Verify Access · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Nov 2024 · Tags: Hard-coded credentials - [IBM Security Verify Access Appliance command execution](https://agentprime.io/advisories/CVE-2024-49803.md) `CVE-2024-49803` · CVE record: IBM Security Verify Access · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Nov 2024 · Tags: Command injection - [IBM Security Verify Access HTTP open redirect](https://agentprime.io/advisories/CVE-2024-35133.md) `CVE-2024-35133` · CVE record: IBM Security Verify Access and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Aug 2024 · Tags: Open redirect - [IBM Security Verify Access information disclosure](https://agentprime.io/advisories/CVE-2023-30430.md) `CVE-2023-30430` · CVE record: IBM Security Verify Access · CVSS 5.5 Medium · Not analysed yet · Published 27 Jun 2024 · Tags: Information disclosure - [IBM Security Verify Access denial of service](https://agentprime.io/advisories/CVE-2024-31883.md) `CVE-2024-31883` · CVE record: IBM Security Verify Access · CVSS 5.3 Medium · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-703 - [IBM Security Verify Access information disclosure](https://agentprime.io/advisories/CVE-2022-43868.md) `CVE-2022-43868` · CVE record: IBM Security Verify Access · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2023 · Tags: Information disclosure - [IBM Security Verify Access denial of service](https://agentprime.io/advisories/CVE-2022-43740.md) `CVE-2022-43740` · CVE record: IBM Security Verify Access · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2023 · Tags: Denial of service - [IBM Security Verify Access denial of service](https://agentprime.io/advisories/CVE-2023-25927.md) `CVE-2023-25927` · CVE record: IBM Security Verify Access · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2023 · Tags: CWE-20 - [IBM Security Verify Access HOST header injection](https://agentprime.io/advisories/CVE-2022-36775.md) `CVE-2022-36775` · CVE record: IBM Security Verify Access · CVSS 6.5 Medium · Not analysed yet · Published 17 Feb 2023 - [IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due to improper access permissions.](https://agentprime.io/advisories/CVE-2022-22465.md) `CVE-2022-22465` · CVE record: IBM Security Verify Access · CVSS 6.3 Medium · Not analysed yet · Published 8 Jul 2022 - [IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatio…](https://agentprime.io/advisories/CVE-2022-22464.md) `CVE-2022-22464` · CVE record: IBM Security Verify Access · CVSS 5.9 Medium · Not analysed yet · Published 8 Jul 2022 - [IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2022-22463.md) `CVE-2022-22463` · CVE record: IBM Security Verify Access · CVSS 5.4 Medium · Not analysed yet · Published 8 Jul 2022 - [IBM Security Verify Access: IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0…](https://agentprime.io/advisories/CVE-2022-22370.md) `CVE-2022-22370` · CVE record: IBM Security Verify Access · CVSS 5.4 Medium · Not analysed yet · Published 8 Jul 2022 - [IBM Security Verify Access: IBM Security Verify Access could allow a user, using man in the middle techniques…](https://agentprime.io/advisories/CVE-2022-22311.md) `CVE-2022-22311` · CVE record: IBM Security Verify Access · CVSS 4.8 Medium · Not analysed yet · Published 31 Mar 2022 - [IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation.](https://agentprime.io/advisories/CVE-2021-38957.md) `CVE-2021-38957` · CVE record: IBM Security Verify Access · CVSS 3.1 Low · Not analysed yet · Published 7 Jan 2022 - [IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in further attacks against the system.](https://agentprime.io/advisories/CVE-2021-38956.md) `CVE-2021-38956` · CVE record: IBM Security Verify Access · CVSS 5.3 Medium · Not analysed yet · Published 7 Jan 2022 - [IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.](https://agentprime.io/advisories/CVE-2021-38921.md) `CVE-2021-38921` · CVE record: IBM Security Verify Access · CVSS 5.9 Medium · Not analysed yet · Published 7 Jan 2022 - [IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-38895.md) `CVE-2021-38895` · CVE record: IBM Security Verify Access · CVSS 3.0 Low · Not analysed yet · Published 7 Jan 2022 - [IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.](https://agentprime.io/advisories/CVE-2021-38894.md) `CVE-2021-38894` · CVE record: IBM Security Verify Access · CVSS 2.7 Low · Not analysed yet · Published 7 Jan 2022 - [IBM Security Verify Access: IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow…](https://agentprime.io/advisories/CVE-2021-29665.md) `CVE-2021-29665` · CVE record: IBM Security Verify Access · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 May 2021 - [IBM Security Verify Access: IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server…](https://agentprime.io/advisories/CVE-2021-20585.md) `CVE-2021-20585` · CVE record: IBM Security Verify Access · CVSS 5.3 Medium · Not analysed yet · Published 31 May 2021 - [IBM Security Verify Access: IBM Security Verify Access 20.07 could allow a remote attacker to send a specially…](https://agentprime.io/advisories/CVE-2021-20576.md) `CVE-2021-20576` · CVE record: IBM Security Verify Access · CVSS 7.5 High · Not analysed yet · Published 31 May 2021 - [IBM Security Verify Access: IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read…](https://agentprime.io/advisories/CVE-2021-20575.md) `CVE-2021-20575` · CVE record: IBM Security Verify Access · CVSS 4.0 Medium · Not analysed yet · Published 31 May 2021 - [IBM Security Verify Access: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an…](https://agentprime.io/advisories/CVE-2020-4499.md) `CVE-2020-4499` · CVE record: IBM Security Verify Access and 1 more · CVSS 7.3 High · Not analysed yet · Published 15 Oct 2020 - [IBM Security Verify Access: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to…](https://agentprime.io/advisories/CVE-2019-4552.md) `CVE-2019-4552` · CVE record: IBM Security Verify Access and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 15 Oct 2020 - [IBM Security Access Manager: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an…](https://agentprime.io/advisories/CVE-2020-4699.md) `CVE-2020-4699` · CVE record: IBM Security Access Manager and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2020 - [IBM Security Access Manager: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an…](https://agentprime.io/advisories/CVE-2020-4661.md) `CVE-2020-4661` · CVE record: IBM Security Access Manager and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2020 - [IBM Security Access Manager: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an…](https://agentprime.io/advisories/CVE-2020-4660.md) `CVE-2020-4660` · CVE record: IBM Security Access Manager and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2020 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .