Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-13272

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

Description

IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Verify Identity Access

  • 11.0.0 to ≤ 11.0.3 Interim Fix 001affected

IBM Security Verify Access

  • 10.0.0 to ≤ 10.0.9.2 Interim Fix 001affected

IBM Verify Identity Access Container

  • 11.0.0 to ≤ 11.0.3 Interim Fix 001affected

IBM Security Verify Access Container

  • 10.0.0 to ≤ 10.0.9.2 Interim Fix 001affected

References