Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_verify_access_docker:10.0.0:*:*:*:*:*:*:*

part: a version: 10.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Verify Access Docker (413088cd-a7b5-5176-8df8-29a4aaf59b6a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0163 vulnerable 2026-06-08 07:00:29.808103 IBM Security Verify Access information disclosure
MEDIUM (5.3)
IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts.
Published: 2025-06-11T14:20:28.855Z
Updated: 2025-08-24T11:55:49.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45647 vulnerable 2026-06-08 06:48:08.764538 IBM Security Verify Access unverified password change
MEDIUM (5.6)
IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password.
Published: 2025-01-20T14:50:54.184Z
Updated: 2025-01-21T20:08:31.459Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35142 vulnerable 2026-06-08 06:37:35.290086 IBM Security Verify Access privilege escalation
HIGH (8.4)
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418.
Published: 2024-05-31T16:57:37.135Z
Updated: 2025-11-03T21:54:56.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35140 vulnerable 2026-06-08 06:37:35.286672 IBM Security Verify Access privilege escalation
HIGH (7.7)
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM X-Force ID: 292416.
Published: 2024-05-31T16:53:08.654Z
Updated: 2025-11-03T21:54:53.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35133 vulnerable 2026-06-08 06:37:35.254872 IBM Security Verify Access HTTP open redirect
MEDIUM (6.8)
IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Published: 2024-08-29T16:39:43.913Z
Updated: 2024-09-21T09:58:17.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39070 vulnerable 2026-06-08 05:33:48.849215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.