CVE-2026-78407 — Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

CVE-2026-78407

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access PUBLISHED

Description (CNA)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected (CNA)

Vendor / product	Versions
IBM / Security Verify Access	affected 10.0 through 10.0.9.2
IBM / Verify Identity Access	affected 11.0 through 11.0.3
IBM / Security Verify Access Container	affected 10.0 through 10.0.9.2
IBM / Verify Identity Access Container	affected 11.0 through 11.0.3

CWE

No CWE identifiers supplied.

References

https://www.ibm.com/support/pages/node/7291628

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.