High severity7.3NVD Advisory· Published Oct 6, 2025· Updated Jun 17, 2026
CVE-2025-36354
CVE-2025-36354
Description
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0
could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*range: >=10.0.0.0,<10.0.9.0
- cpe:2.3:a:ibm:security_verify_access:10.0.0.0:*:*:*:*:*:*:*range: 10.0.0.0
- cpe:2.3:a:ibm:security_verify_access:10.0.9.0:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_verify_access:10.0.9.0:interim_fix1:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_verify_access:10.0.9.0:interim_fix2:*:*:*:*:*:*
- (no CPE)range: 10.0.0.0 - 10.0.9.0, 11.0.0.0 - 11.0.1.0
cpe:2.3:a:ibm:security_verify_access_docker:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:security_verify_access_docker:*:*:*:*:*:*:*:*range: >=10.0.0.0,<10.0.9.0
- cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:interim_fix1:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:interim_fix2:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:verify_identity_access:*:*:*:*:*:*:*:*range: >=11.0.0.0,<11.0.1.0
- cpe:2.3:a:ibm:verify_identity_access:11.0.1.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access_docker:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:verify_identity_access_docker:*:*:*:*:*:*:*:*range: >=11.0.0.0,<11.0.1.0
- cpe:2.3:a:ibm:verify_identity_access_docker:11.0.1.0:-:*:*:*:*:*:*
- Range: 10.0.0.0 - 10.0.9.0, 11.0.0.0 - 11.0.1.0
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7247215nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.