CVE-2026-13297CWE-1336

CVE-2026-13297

High · published September 4, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.4th percentile
Weakness
CWE-1336 · Improper Neutralization of Special Elements Used in a Template Engine
Published
2026-09-04T21:16Z
References (1)
https://www.ibm.com/support/pages/node/7286188 · [email protected]
EPSS history
Timeline
  • 06 SEP 03:29Z
    EPSS moved — → 0%
    epss
  • 04 SEP 16:46Z
    Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
    cvelistv5