SD
Product
Security Directory Server
22
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 11Low 0
Watch
Add Security Directory Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4538 | 8.2 | Oct 2 | IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 6.4.0 |
| CVE-2022-32759 | 7.5 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain… Affected: All versions, or not specified |
| CVE-2019-4540 | 7.5 | Feb 4 | IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4520 | 7.5 | Oct 2 | IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials Affected: 6.4.0 |
| CVE-2015-1977 | 7.5 | Jul 15 | Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and… Affected: 6.4.0; 6.4.0.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; +23 more |
| CVE-2019-4541 | 7.2 | Feb 4 | IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the… Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4539 | 7.1 | Oct 2 | IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML… Affected: 6.4.0 |
Showing 7