CVE-2023-35019
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
Risk Assessment
An attacker could gain full control over the system, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update to the latest version of the software and monitor the system for suspicious activity.
Other vulnerabilities in IBM Security Verify Governance, Identity Manager 10.0
See all- CVE-2025-36003High
IBM Security Verify Governance Identity Manager 10.0.2 may return detailed technical error messages that disclose sensitive system information. A remote attacker could use this information in further attacks against the system.
- CVE-2023-35016Medium
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing 'dot dot' sequences (/../) to view arbitrary files on the system.
Original NVD description (English source)
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS