Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_verify_access:10.0.8:*:*:*:*:*:*:*

part: a version: 10.0.8 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Verify Access (f6180330-981a-5dd9-8706-adbe9735438a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0163 vulnerable 2026-06-08 07:00:29.807096 IBM Security Verify Access information disclosure
MEDIUM (5.3)
IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts.
Published: 2025-06-11T14:20:28.855Z
Updated: 2025-08-24T11:55:49.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49806 vulnerable 2026-06-08 06:50:14.707713 IBM Security Verify Access Appliance hard coded credentials
CRITICAL (9.4)
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Published: 2024-11-29T16:53:45.208Z
Updated: 2024-11-29T17:09:49.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49805 vulnerable 2026-06-08 06:50:14.707202 IBM Security Verify Access Appliance hard coded credentials
CRITICAL (9.4)
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Published: 2024-11-29T16:52:15.174Z
Updated: 2024-11-29T17:09:49.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49804 vulnerable 2026-06-08 06:50:14.706644 IBM Security Verify Access Appliance privilege escalation
HIGH (7.8)
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative user to escalate their privileges due to unnecessary permissions used to perform certain tasks.
Published: 2024-11-29T16:55:32.323Z
Updated: 2024-11-29T17:09:49.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49803 vulnerable 2026-06-08 06:50:14.700368 IBM Security Verify Access Appliance command execution
CRITICAL (9.8)
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
Published: 2024-11-29T16:50:31.964Z
Updated: 2024-11-29T17:09:49.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45647 vulnerable 2026-06-08 06:48:08.763573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35133 vulnerable 2026-06-08 06:37:35.253707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.