CVE-2022-35284: IBM Security Verify Information Queue

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811.

Affected products

• IBM Security Verify Information Queue: version 10.0.2 only

Published 2022-07-25. Last modified 2026-06-17.