IBM Verify Directory
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in IBM Verify Directory.
By the Year
In 2026 there have been 4 vulnerabilities in IBM Verify Directory with an average score of 5.8 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 4 | 5.78 |
It may take a day or so for new Verify Directory vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Verify Directory Security Vulnerabilities
IBM Verify Directory <=10.0.4,11.0.0 GET auth credentials exposure
CVE-2026-8860
6.5 - Medium
- November 08, 2026
IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs.
Trusting HTTP Permission Methods on the Server Side
IBM Security Verify Directory 10.0.0-10.0.4, 11.0.0 Debug Info Disclosure
CVE-2026-8642
4.3 - Medium
- November 08, 2026
IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and session identifiers. This information can be used to identify vulnerable software versions.
Information Disclosure
IBM Verify Directory 10.0.010.0.4, 11.0.0: CSRF (Missing SameSite)
CVE-2026-8640
3.5 - Low
- November 08, 2026
IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite attribute on session cookies, making it vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can cause authenticated users' browsers to send unauthorized requests to the application.
Session Riding
IBM Verify Directory <=10.0.4 & 11.0.0 Session Fixation
CVE-2026-8639
8.8 - High
- November 08, 2026
IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. An attacker can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized access to the directory management console.
Session Fixation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Verify Directory or by IBM? Click the Watch button to subscribe.
