Verify Identity Access Container
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:*
part: a version: 11.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Verify Identity Access Container (c5d29f75-b41e-58dc-97a9-93867fcaa003) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8861 |
vulnerable | 2026-07-29 01:09:06.347384 |
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
MEDIUM (5.3)
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Published: 2026-07-17T18:54:36.296Z
Updated: 2026-07-20T19:23:27.313Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7364 |
vulnerable | 2026-07-29 01:09:04.616746 |
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
LOW (3.1)
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An attacker could exploit this vulnerability using a specially crafted request to redirect a victim to arbitrary Web sites.
Published: 2026-07-17T19:31:02.236Z
Updated: 2026-07-20T13:59:14.531Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4938 |
vulnerable | 2026-07-29 00:57:47.373912 |
Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access
MEDIUM (6.5)
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow an attacker with read-only privileges to make unauthorized modifications and deployments outside of their assigned permissions.
Published: 2026-07-17T19:34:14.956Z
Updated: 2026-07-28T18:08:00.558Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5926 |
vulnerable | 2026-06-08 08:07:04.248482 |
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
MEDIUM (6.5)
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Published: 2026-04-22T23:38:46.689Z
Updated: 2026-04-23T12:49:52.484Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4364 |
vulnerable | 2026-06-08 08:05:13.282701 |
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
MEDIUM (5.4)
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 allows certificate listings retrieved via a browser session to return a JSON payload while incorrectly specifying the response Content-Type as text/html. Because the content is delivered with an HTML MIME type, browsers may interpret the JSON data as executable script under certain conditions. This creates an opportunity for JavaScript injection, potentially leading to cross-site scripting (XSS).
Published: 2026-04-01T20:34:29.504Z
Updated: 2026-04-02T13:33:42.951Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4101 |
vulnerable | 2026-06-08 08:05:12.599169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2862 |
vulnerable | 2026-06-08 07:55:17.745979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2475 |
vulnerable | 2026-06-08 07:55:17.102616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1491 |
vulnerable | 2026-06-08 07:49:08.718582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1346 |
vulnerable | 2026-06-08 07:49:08.373300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1345 |
vulnerable | 2026-06-08 07:49:08.371507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1343 |
vulnerable | 2026-06-08 07:49:08.360683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1342 |
vulnerable | 2026-06-08 07:49:08.333296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.