Vulnerability Description
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Verify Access | >= 10.0.0.0, < 10.0.9.0 |
| Ibm | Security Verify Access Docker | >= 10.0.0.0, < 10.0.9.0 |
| Ibm | Verify Identity Access | >= 11.0.0.0, < 11.0.1.0 |
| Ibm | Verify Identity Access Docker | >= 11.0.0.0, < 11.0.1.0 |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7247215PatchVendor Advisory
FAQ
What is CVE-2025-36355?
CVE-2025-36355 is a vulnerability with a CVSS score of 8.5 (HIGH). IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from ou...
How severe is CVE-2025-36355?
CVE-2025-36355 has been rated HIGH with a CVSS base score of 8.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-36355?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Security Verify Access, Ibm Security Verify Access Docker, Ibm Verify Identity Access, Ibm Verify Identity Access Docker.