AD
Product
Apache Directory LDAP API
7
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 1High 6Medium 0Low 0
Watch
Add Apache Directory LDAP API to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103877 | 9.8 | Oct 2 | Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements Affected: 2.1.0 before 2.1.9 |
| CVE-2026-35563 | 8.5 | Jun 1 | Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostname Affected: 2.0.0 through 2.1.7 |
| CVE-2026-103885 | 7.5 | Oct 2 | Apache Directory LDAP API: Denial of service via crafted telephone number values Affected: 2.1.0 before 2.1.9 |
| CVE-2026-103880 | 7.5 | Oct 2 | Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords Affected: 2.1.0 before 2.1.9 |
| CVE-2026-103878 | 7.5 | Oct 2 | Apache Directory LDAP API: Injection of plaintext responses during StartTLS Affected: 2.1.0 before 2.1.9 |
| CVE-2026-102731 | 7.5 | Oct 2 | Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode Affected: 1.2.0 before 1.2.9 |
| CVE-2026-103552 | 7.3 | Oct 2 | Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder Affected: 1.2.0 before 1.2.9 |
Showing 7