Security Verify Access Docker

Vendor:

First CVE: Feb 2, 2022 · Active for 4 years

27
Total CVEs
More Total CVEs than 96% of tracked products
6.8
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Security Verify Access Docker over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 2, 2022
4 years ago
Most Recent CVE
Oct 6, 2025
291 days ago

CVE Severity & Scoring

Security Verify Access Docker27 CVEs
All CVEs352,294 CVEs
MediumHighCritical
Attack Vector
Local13 (48.1%)
Network14 (51.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low26 (96.3%)
High1 (3.7%)
Unknown0 (0.0%)
User Interaction
None25 (92.6%)
Unknown0 (0.0%)
Required2 (7.4%)
Privileges Required
Low10 (37.0%)
High1 (3.7%)
None16 (59.3%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (27 CVEs).

27 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-36356CRITICAL
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their
Oct 6, 20259.333NONO
CVE-2024-35133HIGH
IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading
Aug 29, 20248.233NOYES
CVE-2021-39070CRITICAL
IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on th
Feb 2, 20229.831NONO
CVE-2025-36355HIGH
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malic
Oct 6, 20258.528NONO
CVE-2024-45647CRITICAL
IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expir
Jan 20, 20259.827NONO
CVE-2025-36354HIGH
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrar
Oct 6, 20257.325NONO
CVE-2024-35142HIGH
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418.
May 31, 20247.824NONO
CVE-2023-31004CRITICAL
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a
Feb 3, 20249.024NONO
CVE-2024-35140HIGH
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM X-Force ID: 292416.
May 31, 20247.823NONO
CVE-2024-35141HIGH
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges.
Dec 19, 20247.822NONO
View all 27 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (27 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
3.7% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (27 CVEs).

Media Mentions

Signals from CVEs in this product scope (27 CVEs).

Top CNAs Publishing CVEs For Security Verify Access Docker

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
10.0.9.038.40.2%00
10.0.4.016.50.4%00
10.0.3.016.50.4%00
10.0.2.028.21.1%00
10.0.1.028.21.1%00
10.0.0.016.50.4%00
10.0.019.81.8%00