IBM Security Verify Access Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in IBM Security Verify Access Appliance and Container versions 10.0.0 through 10.0.8. This issue allows an unauthenticated attacker to inject arbitrary JavaScript into the Web UI, potentially altering functionality and leading to credential disclosure within a trusted session.

Impact

Exploitation of this vulnerability could result in cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's session.

Remediation

Users are advised to update to IBM Security Verify Access version 10.0.9 or IBM Verify Identity Access version 11.0. Instructions for downloading these versions are available on the IBM Support website.