IBM Security Verify Access Oidc Provider vulnerabilities

3 CVEs affecting IBM Security Verify Access Oidc Provider, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-22338, published 2024-05-31.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-43740, published 2023-10-14. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 238921.
• CVE-2022-43868, published 2023-10-14. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attacks against the system. IBM X-Force ID: 239445.
• CVE-2024-22338, published 2024-05-31. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978.