cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2022-43890,https://securityvulnerability.io/vulnerability/CVE-2022-43890,Potential Security Risk: HTTP Request Could Disclose Sensitive Information,"A vulnerability exists in IBM Security Verify Privilege On-Premises 11.5 that allows for the potential disclosure of sensitive information through crafted HTTP requests. This flaw could facilitate further attacks, thereby compromising the integrity of the system. Organizations utilizing this version are advised to assess their security posture and apply necessary mitigations to safeguard sensitive data and reduce the risk of exploitation.",IBM,Security Verify Privilege On-premises,5.3,MEDIUM,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-03-04T15:52:58.538Z,0
CVE-2022-43891,https://securityvulnerability.io/vulnerability/CVE-2022-43891,IBM Security Verify Privilege information disclosure,"
IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.  IBM X-Force ID:  240454.

",IBM,Security Verify Privilege,2.7,LOW,0.000910000002477318,false,,false,false,false,,,false,false,,2023-10-17T02:04:17.754Z,0
CVE-2022-43892,https://securityvulnerability.io/vulnerability/CVE-2022-43892,IBM Security Verify Privilege information disclosure,"
IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could disclose sensitive information which could aid further attacks against the system.  IBM X-Force ID:  240455.

",IBM,Security Verify Privilege,3.7,LOW,0.0006200000061653554,false,,false,false,false,,,false,false,,2023-10-17T02:00:49.518Z,0
CVE-2022-43893,https://securityvulnerability.io/vulnerability/CVE-2022-43893,IBM Security Verify Privilege denial of service,"
IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload.  IBM X-Force ID:  240634.

",IBM,Security Verify Privilege,2.7,LOW,0.0004299999854993075,false,,false,false,false,,,false,false,,2023-10-17T01:58:45.560Z,0
CVE-2022-43889,https://securityvulnerability.io/vulnerability/CVE-2022-43889,IBM Security Verify Privilege information disclosure,"
IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system.  IBM X-Force ID:  240452.

",IBM,Security Verify Privilege,5.3,MEDIUM,0.0006200000061653554,false,,false,false,false,,,false,false,,2023-10-17T01:56:04.573Z,0
CVE-2021-29913,https://securityvulnerability.io/vulnerability/CVE-2021-29913,IBM Security Verify Privilege improper input validation,"
IBM Security Verify Privilege On-Premise 11.5 could allow an authenticated user to obtain sensitive information or perform unauthorized actions due to improper input validation.  IBM X-Force ID:  207898.

",IBM,Security Verify Privilege,6.5,MEDIUM,0.000859999970998615,false,,false,false,false,,,false,false,,2023-10-17T01:28:43.135Z,0
CVE-2022-22380,https://securityvulnerability.io/vulnerability/CVE-2022-22380,IBM Security Verify Privilege improper authentication,"
IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates.  IBM X-Force ID:  221957.

",IBM,Security Verify Privilege,5,MEDIUM,0.0006200000061653554,false,,false,false,false,,,false,false,,2023-10-17T01:25:30.232Z,0
CVE-2022-22375,https://securityvulnerability.io/vulnerability/CVE-2022-22375,IBM Security Verify Privilege command execution,"IBM Security Verify Privilege On-Premises 11.5 is susceptible to a vulnerability that allows remote authenticated attackers to execute arbitrary commands on the host system. This occurs when specially crafted requests are sent, potentially leading to unauthorized access and control over critical system functionalities. It is essential for users of this product to implement necessary security patches and access controls to mitigate the risks posed by this vulnerability.",IBM,Security Verify Privilege,7.2,HIGH,0.0010000000474974513,false,,false,false,false,,,false,false,,2023-10-17T01:21:58.685Z,0
CVE-2021-20581,https://securityvulnerability.io/vulnerability/CVE-2021-20581,IBM Security Verify Privilege information disclosure,"
IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient session expiration.  IBM X-Force ID:  199324.

",IBM,Security Verify Privilege,5.3,MEDIUM,0.0004799999878741801,false,,false,false,false,,,false,false,,2023-10-17T01:17:54.471Z,0
CVE-2021-38859,https://securityvulnerability.io/vulnerability/CVE-2021-38859,IBM Security Verify Privilege information disclosure,"
IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain version number information using a specially crafted HTTP request that could be used in further attacks against the system.  IBM X-Force ID:  207899.

",IBM,Security Verify Privilege,4.3,MEDIUM,0.0005799999926239252,false,,false,false,false,,,false,false,,2023-10-17T01:15:31.784Z,0
CVE-2022-22385,https://securityvulnerability.io/vulnerability/CVE-2022-22385,IBM Security Verify Privilege information disclosure,"
IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear text.  IBM X-Force ID:  221962.

",IBM,Security Verify Privilege,5.9,MEDIUM,0.001069999998435378,false,,false,false,false,,,false,false,,2023-10-17T01:11:48.947Z,0
CVE-2022-22386,https://securityvulnerability.io/vulnerability/CVE-2022-22386,IBM Security Verify Privilege information disclosure,"
IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.  IBM X-Force ID:  221963.

",IBM,Security Verify Privilege,5.3,MEDIUM,0.0010300000431016088,false,,false,false,false,,,false,false,,2023-10-17T01:08:15.928Z,0
CVE-2022-22384,https://securityvulnerability.io/vulnerability/CVE-2022-22384,IBM Security Verify Privilege improper input validation,"
IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due to hazardous input validation. IBM X-Force ID: 221961.

",IBM,Security Verify Privilege,4.3,MEDIUM,0.0004799999878741801,false,,false,false,false,,,false,false,,2023-10-17T00:43:12.513Z,0
CVE-2022-22377,https://securityvulnerability.io/vulnerability/CVE-2022-22377,IBM Security Verify Privilege information disclosure,"IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.  IBM X-Force ID:  221827.",IBM,Security Verify Privilege,5.3,MEDIUM,0.0009899999713525176,false,,false,false,false,,,false,false,,2023-10-17T00:36:36.434Z,0
CVE-2021-29676,https://securityvulnerability.io/vulnerability/CVE-2021-29676,,"IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking",IBM,Security Verify Privilege Vault,4.6,MEDIUM,0.0006600000197067857,false,,false,false,false,,,false,false,,2021-06-25T00:00:00.000Z,0
CVE-2021-20583,https://securityvulnerability.io/vulnerability/CVE-2021-20583,,IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) could disclose sensitive information through an HTTP GET request by a privileged user due to improper input validation.. IBM X-Force ID: 199396.,IBM,Security Verify Privilege Vault,6.2,MEDIUM,0.0005499999970197678,false,,false,false,false,,,false,false,,2021-06-25T00:00:00.000Z,0
CVE-2020-4610,https://securityvulnerability.io/vulnerability/CVE-2020-4610,,IBM Security Secret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local user to execute code due to improper integrity checks. IBM X-Force ID: 184919.,IBM,Security Verify Privilege Manager,7.4,HIGH,0.0008500000112690032,false,,false,false,false,,,false,false,,2021-06-25T00:00:00.000Z,0
CVE-2021-29677,https://securityvulnerability.io/vulnerability/CVE-2021-29677,,IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.,IBM,Security Verify Privilege Vault,5.4,MEDIUM,0.0005000000237487257,false,,false,false,false,,,false,false,,2021-06-25T00:00:00.000Z,0
CVE-2020-4609,https://securityvulnerability.io/vulnerability/CVE-2020-4609,,"IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and execute arbitrary code on the system or cause the system to crash. IBM X-Force ID: 184917.",IBM,Security Verify Privilege Manager,7.4,HIGH,0.0008500000112690032,false,,false,false,false,,,false,false,,2021-06-25T00:00:00.000Z,0
CVE-2020-4606,https://securityvulnerability.io/vulnerability/CVE-2020-4606,,IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A local attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 184883.,IBM,Security Verify Privilege Manager,5.7,MEDIUM,0.0004199999966658652,false,,false,false,false,,,false,false,,2021-01-08T15:15:00.000Z,0
CVE-2020-4607,https://securityvulnerability.io/vulnerability/CVE-2020-4607,,IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security restrictions due to improper input validation. IBM X-Force ID: 184884.,IBM,Security Verify Privilege Vault Remote,3.3,LOW,0.0004199999966658652,false,,false,false,false,,,false,false,,2020-09-29T14:15:00.000Z,0