CVE-2022-22456

IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225004.

• CWE-79
• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/225004VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6849247Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/225004VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6849247Patch, Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2245The Counter Box WordPress plugin before 1.2.1 is lacking CSR…8.8
• CVE-2022-22450IBM Security Verify Identity Manager 10.0 could allow a priv…3.8
• CVE-2022-22452IBM Security Verify Identity Manager 10.0 uses an inadequate…7.5
• CVE-2022-22453IBM Security Verify Identity Manager 10.0 uses weaker than e…7.5
• CVE-2022-22454IBM InfoSphere Information Server 11.7 could allow a locally…7.8
• CVE-2022-22455IBM Security Verify Governance Identity Manager 10.0 virtual…9.8
• CVE-2022-22457IBM Security Verify Governance, Identity Manager 10.0.1 stor…4.4
• CVE-2022-22458 IBM Security Verify Governance, Identity Manager 10.0.1 sto…6.5
• CVE-2022-2246Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2022-22460IBM Security Verify Identity Manager 10.0 contains sensitive…7.5
• CVE-2022-22461 IBM Security Verify Governance, Identity Manager 10.0.1 use…7.5
• CVE-2022-22462 IBM Security Verify Governance, Identity Manager virtual ap…7.5