Skip to content
OpenAdvisories

Product · IBM

Security Verify Directory

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-8640

    IBM Verify Directory is affected by multiple vulnerabilities

    IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite attribute on session cookies, making it vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can cause authenticated users' browsers …

    IBM Security Verify Directory Verify Directory
  • Low 2.7
    CVE-2022-32756

    IBM Security Verify Directory information disclosure

    IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 228507.

    IBM Security Verify Directory