CVE-2024-22330

9.8 criticalEPSS 0.3%

Critical (9.8) in ibm security verify governance. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-521
Published: 2025-06-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:security_verify_governance

References

https://www.ibm.com/support/pages/node/7235779

Check your stack JSON