CVE-2023-25927CWE-20
IBM Security Verify Access denial of service
Medium · published May 12, 2023
What it is
IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system. IBM X-Force ID: 247635.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.01485 · 73.8th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2023-05-12T17:38Z
EPSS history
Timeline