IBM Security Verify vulnerabilities

3 CVEs affecting IBM Security Verify, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29677, published 2021-06-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20583, published 2021-06-25. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) could disclose sensitive information through an HTTP GET request by a privileged user due to improper input validation.. IBM X-Force…
CVE-2021-29676, published 2021-06-25. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit…
CVE-2021-29677, published 2021-06-25. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…