IBM Security Verify Governance 10.0.2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_verify_governance:10.0.2:*:*:*:*:*:*:*
part: a version: 10.0.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Verify Governance (17043339-d3c8-5724-a03a-281653622069) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36003 |
vulnerable | 2026-06-08 07:21:00.285259 |
IBM Security Verify Governance Identity Manager information disclosure
HIGH (7.5)
IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system.
Published: 2025-08-28T02:07:51.600Z
Updated: 2025-08-28T14:18:52.198Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22330 |
vulnerable | 2026-06-08 06:29:34.559232 |
IBM Security Verify Governance information disclosure
MEDIUM (5.9)
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Published: 2025-06-06T01:08:52.194Z
Updated: 2025-08-24T11:58:59.780Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35888 |
vulnerable | 2026-06-08 06:06:28.053882 |
IBM Security Verify Governance information disclosure
MEDIUM (5.9)
IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 258375.
Published: 2024-03-20T13:25:12.617Z
Updated: 2024-08-02T16:37:39.908Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35017 |
vulnerable | 2026-06-08 06:06:26.386854 |
IBM Security Verify Governance information
MEDIUM (5.9)
IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.
Published: 2025-01-29T00:00:14.545Z
Updated: 2025-01-29T14:12:47.145Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33844 |
vulnerable | 2026-06-08 06:06:23.586020 |
IBM Security Verify Governance cross-site scripting
MEDIUM (5.4)
IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-04-09T14:03:58.894Z
Updated: 2025-08-16T23:42:11.334Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33838 |
vulnerable | 2026-06-08 06:06:23.572867 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.