Security Verify Governance

Vendor:

First CVE: Jul 14, 2022 · Active for 4 years

28

Total CVEs

More Total CVEs than 97% of tracked products

7.0

Avg CVEs / Year

Higher CVE frequency than 93% of tracked products

6.8

Avg CVSS

Higher Avg CVSS than 39% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Security Verify Governance over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 14, 2022

4 years ago

Most Recent CVE

Aug 28, 2025

334 days ago

CVE Severity & Scoring

Security Verify Governance28 CVEs

50%

32%

14%

All CVEs353,173 CVEs

45%

40%

11%

LowMediumHighCritical

Attack Vector

Local3 (10.7%)

Network25 (89.3%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low25 (89.3%)

High3 (10.7%)

Unknown0 (0.0%)

User Interaction

None25 (89.3%)

Unknown0 (0.0%)

Required3 (10.7%)

Privileges Required

Low7 (25.0%)

High6 (21.4%)

None15 (53.6%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (28 CVEs).

28 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2022-22455CRITICAL IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum level required, which cr	Aug 17, 2022	9.8	31	NO	NO
CVE-2024-22330CRITICAL IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.	Jun 6, 2025	9.8	29	NO	NO
CVE-2022-22466CRITICAL IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communicati	Oct 23, 2023	9.8	28	NO	NO
CVE-2023-33836CRITICAL IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communicati	Oct 16, 2023	9.8	27	NO	NO
CVE-2023-35019HIGH IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request	Jul 31, 2023	8.8	25	NO	NO
CVE-2022-22462HIGH IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt high	Jan 26, 2023	7.5	24	NO	NO
CVE-2022-22461HIGH IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IB	Dec 22, 2022	7.5	24	NO	NO
CVE-2022-22460HIGH IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be used in further attacks against the system. IBM X-Force ID: 225	Jul 14, 2022	7.5	24	NO	NO
CVE-2022-22453HIGH IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 2	Jul 14, 2022	7.5	24	NO	NO
CVE-2022-22452HIGH IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 224918.	Jul 14, 2022	7.5	24	NO	NO

View all 28 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (28 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (28 CVEs).

Media Mentions

Signals from CVEs in this product scope (28 CVEs).

Top CNAs Publishing CVEs For Security Verify Governance

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
10.0.2	6	6.2	0.3%
10.0.1	9	6.2	0.5%
10.0	11	7.1	0.7%