IBM Security Verify Password Synchronization vulnerabilities

2 CVEs affecting IBM Security Verify Password Synchronization, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22323, published 2022-04-27.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-22323, published 2022-04-27. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password…
• CVE-2022-22312, published 2022-04-27. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password…