Medium · 4.2 CVE-2022-22456 EUVD-2022-27602GHSA-9mx2-p359-g99j

IBM Security Verify Governance, Identity Manager cross-site scripting

Published Dec 22, 2022 · Updated Apr 15, 2025 · Assigned by ibm

Vendor: IBM Product: Security Verify Governance Identity Manager

Description

IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225004.

Affected products

Vendor	Product	Affected	Fixed
IBM	Security Verify Governance, Identity Manager	10.0.1	—

Advisories 1

WID-SEC-2022-2377 IBM Security Identity Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 20, 2022

References

https://www.ibm.com/support/pages/node/6849247 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/225004 vdb-entry