Verify Identity Access
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:verify_identity_access:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Verify Identity Access (5934a418-d4b6-5743-8926-06614c743f7f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5926 |
vulnerable | 2026-06-08 08:07:04.261699 |
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
MEDIUM (6.5)
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Published: 2026-04-22T23:38:46.689Z
Updated: 2026-04-23T12:49:52.484Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4364 |
vulnerable | 2026-06-08 08:05:13.283340 |
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
MEDIUM (5.4)
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 allows certificate listings retrieved via a browser session to return a JSON payload while incorrectly specifying the response Content-Type as text/html. Because the content is delivered with an HTML MIME type, browsers may interpret the JSON data as executable script under certain conditions. This creates an opportunity for JavaScript injection, potentially leading to cross-site scripting (XSS).
Published: 2026-04-01T20:34:29.504Z
Updated: 2026-04-02T13:33:42.951Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4101 |
vulnerable | 2026-06-08 08:05:12.610926 |
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
HIGH (8.1)
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass authentication mechanisms and gain unauthorized access to the application.
Published: 2026-04-01T20:35:56.948Z
Updated: 2026-04-03T13:02:16.369Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2862 |
vulnerable | 2026-06-08 07:55:17.746615 |
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
MEDIUM (5.3)
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 IBM Security Verify could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse proxy.
Published: 2026-04-01T20:41:04.916Z
Updated: 2026-04-02T14:00:43.189Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2475 |
vulnerable | 2026-06-08 07:55:17.114403 |
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
LOW (3.1)
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An attacker could exploit this vulnerability using a specially crafted request to redirect a victim to arbitrary Web sites.
Published: 2026-04-01T20:56:21.887Z
Updated: 2026-04-02T13:33:36.265Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1491 |
vulnerable | 2026-06-08 07:49:08.719529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1346 |
vulnerable | 2026-06-08 07:49:08.374336 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1345 |
vulnerable | 2026-06-08 07:49:08.372579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1343 |
vulnerable | 2026-06-08 07:49:08.361898 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1342 |
vulnerable | 2026-06-08 07:49:08.359263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36356 |
vulnerable | 2026-06-08 07:21:01.604865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36355 |
vulnerable | 2026-06-08 07:21:01.603052 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36354 |
vulnerable | 2026-06-08 07:21:01.598677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.