SD
Product
Security Directory Server
22
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 11Low 0
Watch
Add Security Directory Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-32755 | 9.1 | Oct 14 | IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 6.4.0.0 |
| CVE-2022-33164 | 9.1 | Sep 8 | IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system Affected: 7.2.0 |
| CVE-2019-4538 | 8.2 | Oct 2 | IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 6.4.0 |
| CVE-2022-32759 | 7.5 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain… Affected: All versions, or not specified |
| CVE-2019-4540 | 7.5 | Feb 4 | IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4520 | 7.5 | Oct 2 | IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials Affected: 6.4.0 |
| CVE-2015-1977 | 7.5 | Jul 15 | Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and… Affected: 6.4.0; 6.4.0.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; +23 more |
| CVE-2019-4541 | 7.2 | Feb 4 | IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the… Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4539 | 7.1 | Oct 2 | IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML… Affected: 6.4.0 |
| CVE-2019-4548 | 6.1 | Feb 4 | IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4542 | 6.1 | Oct 2 | IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting Affected: 6.4.0 |
| CVE-2022-33161 | 5.9 | Oct 14 | IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 6.4.0.0 |
| CVE-2015-1976 | 5.5 | Feb 8 | IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash Affected: 6.3.0.0 through 6.3.1.15; 6.4.0.0 through 6.4.0.6 |
| CVE-2024-28772 | 5.4 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting Affected: All versions, or not specified |
| CVE-2019-4563 | 5.3 | Oct 29 | IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies Affected: 6.4.0.0 |
| CVE-2019-4547 | 5.3 | Oct 29 | IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associated data Affected: 6.4.0.0 |
| CVE-2019-4562 | 5.3 | Feb 4 | IBM Security Directory Server 6.4.0 stores sensitive information in URLs Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4551 | 5.3 | Feb 4 | IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4550 | 5.3 | Feb 4 | IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4549 | 5.3 | Oct 2 | IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users Affected: 6.4.0 |
| CVE-2014-6100 | – | Oct 19 | Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before… Affected: 6.3.1; 6.3.1.1; 6.3.1.2; 6.3.1.3; 6.3.1.4; 6.3.1.5; +1 more |
| CVE-2013-6747 | – | Jan 27 | IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a… Affected: All versions, or not specified |
Showing 22