IBM Security Verify Privilege Manager vulnerabilities

3 CVEs affecting IBM Security Verify Privilege Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4610, published 2021-06-25.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-4606, published 2021-01-08. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A local attacker could exploit this vulnerability to expose…
• CVE-2020-4609, published 2021-06-25. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and execute…
• CVE-2020-4610, published 2021-06-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Security Secret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local user to execute code due to improper integrity checks. IBM X-Force ID: 184919.