Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_verify_access_docker:10.0.0.0:*:*:*:*:*:*:*

part: a version: 10.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Verify Access Docker (413088cd-a7b5-5176-8df8-29a4aaf59b6a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36356 vulnerable 2026-06-08 07:21:01.604030 IBM Security Verify Access privilege escalation
CRITICAL (9.3)
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.
Published: 2025-10-06T16:50:48.729Z
Updated: 2025-10-06T20:00:08.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36355 vulnerable 2026-06-08 07:21:01.602075 IBM Security Verify Access code execution
HIGH (8.5)
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.
Published: 2025-10-06T16:52:30.705Z
Updated: 2025-10-06T19:59:35.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36354 vulnerable 2026-06-08 07:21:01.589743 IBM Security Verify Access command execution
HIGH (7.3)
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input.
Published: 2025-10-06T16:53:43.179Z
Updated: 2025-10-06T19:58:39.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36087 vulnerable 2026-06-08 07:21:00.890000 IBM Security Verify Access hard coded credentials
HIGH (8.1)
IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain configurations, contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Published: 2025-10-13T00:38:14.262Z
Updated: 2025-10-15T13:46:30.081Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35139 vulnerable 2026-06-08 06:37:35.286114 IBM Security Access Manager Docker information disclosure
MEDIUM (6.2)
IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect default permissions. IBM X-Force ID: 292415.
Published: 2024-06-28T15:42:04.309Z
Updated: 2025-11-03T21:54:51.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35137 vulnerable 2026-06-08 06:37:35.280303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38371 vulnerable 2026-06-08 06:08:17.738289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38370 vulnerable 2026-06-08 06:08:17.737688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38368 vulnerable 2026-06-08 06:08:17.732650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30999 vulnerable 2026-06-08 06:04:41.624539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30998 vulnerable 2026-06-08 06:04:41.623923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30997 vulnerable 2026-06-08 06:04:41.621744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36775 vulnerable 2026-06-08 05:46:07.743216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.