CVE-2026-8860mediumCWE-650

CVE-2026-8860: falha de média gravidade em IBM Verify Directory

IBM Verify Directory is affected by multiple vulnerabilities

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Security Verify Directory+ Monitorar Verify Directory

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.3%
IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · Security Verify DirectoryIBM · Verify Directory
CVEs relacionadas — IBM Verify Directory

No mesmo produto, das mais perigosas para as menos.

CVE-2024-51450CRITICALIBM Security Verify Directory Command ExecutionEPSS 1.1%CVE-2022-32756LOWIBM Security Verify Directory information disclosureEPSS 0.5%CVE-2022-32751MEDIUMIBM Security Verify Directory information disclosureEPSS 0.5%CVE-2024-45650HIGHIBM Security Verify Directory denial of serviceEPSS 0.4%CVE-2026-8639HIGHIBM Verify Directory is affected by multiple vulnerabilitiesEPSS 0.3%CVE-2022-32754MEDIUMIBM Security Verify Directory cross-site scriptingEPSS 0.3%