IBM Verify Identity Access Digital Credentials vulnerabilities

2 CVEs affecting IBM Verify Identity Access Digital Credentials, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-56343, published 2025-06-06.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-56343, published 2025-06-06. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.
• CVE-2024-56342, published 2025-06-06. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This…