Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_verify_governance:10.0.1:*:*:*:*:*:*:*

part: a version: 10.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Verify Governance (17043339-d3c8-5724-a03a-281653622069)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33840 vulnerable 2026-06-08 06:06:23.575530 IBM Security Verify Governance cross-site scripting
MEDIUM (4.8)
IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256037.
Published: 2023-10-23T19:36:04.866Z
Updated: 2024-09-11T14:31:53.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33839 vulnerable 2026-06-08 06:06:23.574983 IBM Security Verify Governance command execution
HIGH (7.2)
IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036.
Published: 2023-10-23T19:45:31.624Z
Updated: 2024-09-11T14:51:31.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35646 vulnerable 2026-06-08 05:46:05.064690 IBM Security Verify Governance, Identity Manager security bypass
MEDIUM (5.9)
IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096.  
Published: 2022-12-22T19:08:08.335Z
Updated: 2025-04-15T14:32:15.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22462 vulnerable 2026-06-08 05:40:53.770845 IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure
LOW (3.7)
IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078.
Published: 2023-01-25T18:59:49.056Z
Updated: 2025-03-31T14:38:06.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22461 vulnerable 2026-06-08 05:40:53.770347 IBM Security Verify Governance, Identity Manager information disclosure
MEDIUM (5.9)
IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225007.
Published: 2022-12-22T19:39:32.078Z
Updated: 2025-04-15T14:31:12.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22458 vulnerable 2026-06-08 05:40:53.769572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22457 vulnerable 2026-06-08 05:40:53.769135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22456 vulnerable 2026-06-08 05:40:53.768794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22449 vulnerable 2026-06-08 05:40:53.764220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.