SD
Product
Security Directory Integrator
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 5Low 0
Watch
Add Security Directory Integrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33162 | 9.8 | Aug 16 | IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user… Affected: 7.2.0 |
| CVE-2024-28767 | 8.8 | Dec 20 | IBM Security Directory Integrator command execution Affected: 7.2.0 through 7.2.0.13; 10.0.0 through 10.0.3 |
| CVE-2024-28766 | 7.5 | Jan 27 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further… Affected: 7.2.0 |
| CVE-2022-33167 | 7.5 | Jul 30 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to… Affected: 7.2.0 |
| CVE-2022-32759 | 7.5 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain… Affected: 7.2.0 |
| CVE-2022-33165 | 7.5 | Oct 14 | IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system Affected: 7.2.0 |
| CVE-2024-28771 | 6.5 | Jan 27 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies Affected: 7.2.0 |
| CVE-2024-28770 | 6.5 | Jan 27 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies Affected: 7.2.0 |
| CVE-2022-33161 | 5.9 | Oct 14 | IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 7.2.0 |
| CVE-2024-28772 | 5.4 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting Affected: 7.2.0 |
| CVE-2024-28765 | 5.3 | May 27 | Security vulnerability was found in IBM Security Directory Integrator Affected: 10.0.0.0 through 10.0.0.2 |
Showing 11