Security Verify Governance
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_verify_governance:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Verify Governance (17043339-d3c8-5724-a03a-281653622069) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-35888 |
vulnerable | 2026-06-08 06:06:28.053928 |
IBM Security Verify Governance information disclosure
MEDIUM (5.9)
IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 258375.
Published: 2024-03-20T13:25:12.617Z
Updated: 2024-08-02T16:37:39.908Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35018 |
vulnerable | 2026-06-08 06:06:26.387246 |
IBM Security Verify Governance file upload
LOW (3.3)
IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382.
Published: 2023-10-15T23:46:49.009Z
Updated: 2024-09-16T19:15:18.958Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35013 |
vulnerable | 2026-06-08 06:06:26.384414 |
IBM Security Verify Governance information disclosure
LOW (2.3)
IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769.
Published: 2023-10-15T23:43:26.543Z
Updated: 2024-09-16T19:17:48.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33840 |
vulnerable | 2026-06-08 06:06:23.575466 |
IBM Security Verify Governance cross-site scripting
MEDIUM (4.8)
IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256037.
Published: 2023-10-23T19:36:04.866Z
Updated: 2024-09-11T14:31:53.854Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33839 |
vulnerable | 2026-06-08 06:06:23.573379 |
IBM Security Verify Governance command execution
HIGH (7.2)
IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036.
Published: 2023-10-23T19:45:31.624Z
Updated: 2024-09-11T14:51:31.170Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33837 |
vulnerable | 2026-06-08 06:06:23.569889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33836 |
vulnerable | 2026-06-08 06:06:23.569311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22470 |
vulnerable | 2026-06-08 05:40:53.773700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22466 |
vulnerable | 2026-06-08 05:40:53.773253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22462 |
vulnerable | 2026-06-08 05:40:53.770815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22460 |
vulnerable | 2026-06-08 05:40:53.769893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22455 |
vulnerable | 2026-06-08 05:40:53.768359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22453 |
vulnerable | 2026-06-08 05:40:53.767585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22452 |
vulnerable | 2026-06-08 05:40:53.767093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22450 |
vulnerable | 2026-06-08 05:40:53.765441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.