IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078.
Search vulnerabilities
CVE-2021-20404
CVSS 3.1 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2021-20403
IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS 3.1 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2021-20402
IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196076.
CVSS 3.1 · 2.7 Low
EPSS 1.0%
KEV · Not listed
Vendors
Products