CVE-2023-35019

HighCVSS 7.2

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.00%

58th percentile - higher than 58% of all known CVEs

Summary

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

Risk Assessment

An attacker could gain full control over the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update to the latest version of the software and monitor the system for suspicious activity.

Other vulnerabilities in IBM Security Verify Governance, Identity Manager 10.0

CVE-2023-35016Medium
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing 'dot dot' sequences (/../) to view arbitrary files on the system.

Original NVD description (English source)

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS