IBM Security Verify Access <10.0.9

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high2medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-45658US	medium5.3	0.43% (37th)	—	no fix	2025-02-04	—
CVE-2024-45659US	—	0.37% (30th)	—	no fix	2025-02-04	—
CVE-2025-0163US	—	0.34% (28th)	—	no fix	2025-06-11	—
CVE-2024-40700US	—	0.31% (24th)	—	no fix	2025-02-04	—
CVE-2024-43187US	high7.5OT elevated	0.25% (16th)	—	no fix	2025-02-04	—
CVE-2024-35138US	—	0.21% (11th)	—	no fix	2025-02-04	—
CVE-2024-45657US	medium6.7	0.14% (4th)	—	no fix	2025-02-04	—

The flaw types (CWEs) most of these CVEs share.

CWE-209Generation of Error Message Containing Sensitive Information2 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.