Security Verify Access
Vendor:
First CVE: Oct 12, 2020 · Active for 5 years
90
Total CVEs
More Total CVEs than 99% of tracked products
12.9
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Security Verify Access over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 12, 2020
5 years ago
Most Recent CVE
Apr 23, 2026
94 days ago
CVE Severity & Scoring
Security Verify Access90 CVEs
43%
37%
14%
All CVEs352,719 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local21 (23.3%)
Network65 (72.2%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network4 (4.4%)
Attack Complexity
Low82 (91.1%)
High8 (8.9%)
Unknown0 (0.0%)
User Interaction
None77 (85.6%)
Unknown0 (0.0%)
Required13 (14.4%)
Privileges Required
Low23 (25.6%)
High13 (14.4%)
None54 (60.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (90 CVEs).
90 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-1346CRITICAL IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S | Apr 8, 2026 | 9.3 | 35 | NO | NO |
CVE-2025-36087CRITICAL IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain configurations, contains hard-coded | Oct 13, 2025 | 9.8 | 33 | NO | NO |
CVE-2025-36356CRITICAL IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their | Oct 6, 2025 | 9.3 | 33 | NO | NO |
CVE-2024-35133HIGH IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading | Aug 29, 2024 | 8.2 | 33 | NO | YES |
CVE-2026-1342HIGH IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S | Apr 8, 2026 | 8.5 | 32 | NO | NO |
CVE-2026-4101CRITICAL IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM S | Apr 1, 2026 | 9.8 | 32 | NO | NO |
CVE-2021-39070CRITICAL IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on th | Feb 2, 2022 | 9.8 | 31 | NO | NO |
CVE-2025-36355HIGH IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0
could allow a locally authenticated user to execute malic | Oct 6, 2025 | 8.5 | 28 | NO | NO |
CVE-2024-49806CRITICAL IBM Security Verify Access Appliance 10.0.0 through 10.0.8
contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authenticat | Nov 29, 2024 | 9.8 | 28 | NO | NO |
CVE-2024-49805CRITICAL IBM Security Verify Access Appliance 10.0.0 through 10.0.8
contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authenticat | Nov 29, 2024 | 9.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (90 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
1.1% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (90 CVEs).
Media Mentions
Signals from CVEs in this product scope (90 CVEs).
Top CNAs Publishing CVEs For Security Verify Access
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 20.07 | 4 | 6.0 | 1.2% | 0 | 0 |
| 11.0.0 | 1 | 7.8 | 0.2% | 0 | 0 |
| 10.0.9.0 | 3 | 8.4 | 0.2% | 0 | 0 |
| 10.0.6 | 1 | 5.5 | 0.1% | 0 | 0 |
| 10.0.5 | 1 | 7.5 | 1.5% | 0 | 0 |
| 10.0.4.0 | 1 | 6.5 | 0.4% | 0 | 0 |
| 10.0.4 | 1 | 7.5 | 1.5% | 0 | 0 |
| 10.0.3.0 | 5 | 6.7 | 0.5% | 0 | 0 |
| 10.0.3 | 2 | 7.0 | 1.1% | 0 | 0 |
| 10.0.2.0 | 11 | 6.5 | 0.8% | 0 | 0 |
| 10.0.2 | 2 | 7.0 | 1.1% | 0 | 0 |
| 10.0.1.0 | 11 | 6.5 | 0.8% | 0 | 0 |
| 10.0.1 | 2 | 7.0 | 1.1% | 0 | 0 |
| 10.0.0.0 | 5 | 6.7 | 0.5% | 0 | 0 |
| 10.0.0 | 29 | 5.8 | 0.8% | 0 | 0 |