Vulnerabilities > IBM > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-07-15 | CVE-2021-20498 | Information Exposure vulnerability in IBM Security Verify Access 10.0.0 IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system. | 5.3 |
| 2021-07-15 | CVE-2021-20500 | Unspecified vulnerability in IBM Security Verify Access 10.0.0 IBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local privileged user. | 4.4 |
| 2021-07-15 | CVE-2021-20510 | Cleartext Storage of Sensitive Information vulnerability in IBM Security Verify Access 10.0.0 IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user. | 4.4 |
| 2021-07-15 | CVE-2021-20511 | Path Traversal vulnerability in IBM Security Verify Access 10.0.0 IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. | 4.9 |
| 2021-07-15 | CVE-2021-20524 | Cross-site Scripting vulnerability in IBM Security Verify Access 10.0.0 IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. | 4.8 |
| 2021-07-15 | CVE-2021-20537 | Use of Hard-coded Credentials vulnerability in IBM Security Verify Access 10.0.0 IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. | 6.5 |
| 2021-07-15 | CVE-2021-29699 | Unrestricted Upload of File with Dangerous Type vulnerability in IBM Security Verify Access 10.0.0 IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user. | 6.8 |
| 2021-07-15 | CVE-2021-29749 | Server-Side Request Forgery (SSRF) vulnerability in IBM products IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery (SSRF). | 5.4 |
| 2021-07-13 | CVE-2021-20361 | Cross-site Scripting vulnerability in IBM Cloud PAK for Applications 4.3 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. | 5.4 |
| 2021-07-13 | CVE-2021-20362 | Cross-site Scripting vulnerability in IBM Cloud PAK for Applications 4.3 IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. | 5.4 |