IBM Security Verify Privilege On-Premises vulnerabilities

15 CVEs affecting IBM Security Verify Privilege On-Premises, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-31887, published 2024-04-16.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-22375, published 2023-10-17. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: …
• CVE-2022-43891, published 2023-10-17. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information…
• CVE-2021-38859, published 2023-10-17. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain version number information using a specially crafted HTTP request that could be used in further attacks against the…
• CVE-2022-43889, published 2023-10-17. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: …
• CVE-2024-31887, published 2024-04-16. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Verify Privilege 11.6.25 could allow an unauthenticated actor to obtain sensitive information from the SOAP API. IBM X-Force ID: 287651.
• CVE-2022-22386, published 2023-10-17. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker…
• CVE-2022-22377, published 2023-10-17. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker…
• CVE-2021-29913, published 2023-10-17. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premise 11.5 could allow an authenticated user to obtain sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: …
• CVE-2022-43893, published 2023-10-17. Medium severity, CVSS 4.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IBM X-Force ID: 240634.
• CVE-2022-22384, published 2023-10-17. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due to hazardous input validation. IBM X-Force ID: 221961.

Latest

• CVE-2022-43890, published 2024-03-04. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 240453.
• CVE-2022-43892, published 2023-10-17. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could disclose sensitive information which could aid further attacks against the…
• CVE-2022-22385, published 2023-10-17. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear text. IBM X-Force ID: 221962.
• CVE-2022-22380, published 2023-10-17. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957.