ibm security verify access container
productUScpe:2.3:a:ibm:security_verify_access_container:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
4critical15high12medium0low
updated 2026-10-29
01
vulnerabilities (37)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-78401US | critical9.8 | — |
| CVE-2026-78406US | critical9.8 | — |
| CVE-2026-16916US | high8.8 | — |
| CVE-2026-19491US | high7.5 | — |
| CVE-2026-16823US | high7.5 | — |
| CVE-2026-11932US | high7.5 | — |
| CVE-2026-19482US | high8.8 | — |
| CVE-2026-8861US | medium5.3 | — |
| CVE-2026-17616US | critical9.8 | — |
| CVE-2026-2862US | — | — |
| CVE-2026-1491US | — | — |
| CVE-2026-19493US | high7.5 | — |
| CVE-2026-4101US | critical9.8 | — |
| CVE-2026-18740US | high8.8 | — |
| CVE-2026-7364US | medium6.1 | — |
| CVE-2026-1345US | — | — |
| CVE-2026-4938US | —OT elevated | — |
| CVE-2026-12091US | medium5.3 | — |
| CVE-2026-19494US | medium6.5 | — |
| CVE-2026-19498US | high7.5 | — |
| CVE-2026-78399US | medium6.5 | — |
| CVE-2026-2475US | medium4.7 | — |
| CVE-2026-19878US | medium6.5 | — |
| CVE-2026-1346US | high7.8 | — |
| CVE-2026-12109US | high7.2 | — |
| CVE-2026-16830US | medium5.4 | — |
| CVE-2026-1343US | high7.2 | — |
| CVE-2026-11930US | high7.5 | — |
| CVE-2026-5926US | —OT elevated | — |
| CVE-2026-11939US | medium5.3 | — |
| CVE-2026-1342US | high7.9 | — |
| CVE-2026-11888US | high7.5 | — |
| CVE-2026-17189US | medium6.1 | — |
| CVE-2026-78407US | medium5.4 | — |
| CVE-2026-11936US | medium5.4 | — |
| CVE-2026-78388US | high8.8 | — |
| CVE-2026-4364US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-287Improper Authentication4 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
- CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')3 CVEs
- CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')2 CVEs
- CWE-502Deserialization of Untrusted Data2 CVEs
- CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
- CWE-125Out-of-bounds Read1 CVEs
- CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE37 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan