CPE Details
IBM Security Verify Information Queue 10.0.2
10.0.2
2022-07-18
11h39 +00:00
11h39 +00:00
2022-08-12
18h37 +00:00
18h37 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:ibm:security_verify_information_queue:10.0.2:*:*:*:*:*:*:*
Informations
Vendor
ibmProduct
security_verify_information_queueVersion
10.0.2Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230814. | 8.8 |
High |
||
| IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 230818. | 6.5 |
Medium |
||
| IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 230817. | 7.5 |
High |
||
| IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230812. | 8.8 |
High |
||
| IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811. | 7.5 |
High |
||
| IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request. | 6.5 |
Medium |
