IBM Security Verify Access Container vulnerabilities, page 4
65 vulnerabilities
Known vulnerabilities in IBM Security Verify Access Container, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-12101ibmsecurity verify access+3
EPSS score0.27%
IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.CVE-2026-12358ibmsecurity verify access+3EPSS score0.39%
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.CVE-2026-12359ibmsecurity verify access+3EPSS score0.45%
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse proxy.CVE-2026-12109ibmsecurity verify access+3EPSS score0.21%
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer.CVE-2026-8861ibmsecurity verify access+3EPSS score0.40%
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.