Security Verify Governance, Identity Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_verify_governance,_identity_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Verify Governance, Identity Manager (b6f4e523-3e9c-57d5-8153-f965d91f48f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-35019 |
vulnerable | 2026-06-08 06:06:26.387707 |
IBM Security Verify Governance command execution
HIGH (7.2)
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873.
Published: 2023-07-31T00:27:01.113Z
Updated: 2024-10-18T20:24:59.638Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35016 |
vulnerable | 2026-06-08 06:06:26.386376 |
IBM Security Verify Governance path traversal
MEDIUM (6.5)
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 257772.
Published: 2023-07-31T00:29:37.729Z
Updated: 2024-10-11T19:11:23.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35646 |
vulnerable | 2026-06-08 05:46:05.063680 |
IBM Security Verify Governance, Identity Manager security bypass
MEDIUM (5.9)
IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096.
Published: 2022-12-22T19:08:08.335Z
Updated: 2025-04-15T14:32:15.895Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22461 |
vulnerable | 2026-06-08 05:40:53.770318 |
IBM Security Verify Governance, Identity Manager information disclosure
MEDIUM (5.9)
IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225007.
Published: 2022-12-22T19:39:32.078Z
Updated: 2025-04-15T14:31:12.463Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22458 |
vulnerable | 2026-06-08 05:40:53.769447 |
IBM Security Verify Governance, Identity Manager information disclosure
MEDIUM (6.3)
IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009.
Published: 2022-12-22T21:14:32.564Z
Updated: 2025-04-15T13:38:54.806Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22457 |
vulnerable | 2026-06-08 05:40:53.769107 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22456 |
vulnerable | 2026-06-08 05:40:53.768759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22449 |
vulnerable | 2026-06-08 05:40:53.763374 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.