SD
Product
Security Directory Server
22
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 11Low 0
Watch
Add Security Directory Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4548 | 6.1 | Feb 4 | IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4542 | 6.1 | Oct 2 | IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting Affected: 6.4.0 |
| CVE-2022-33161 | 5.9 | Oct 14 | IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 6.4.0.0 |
| CVE-2015-1976 | 5.5 | Feb 8 | IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash Affected: 6.3.0.0 through 6.3.1.15; 6.4.0.0 through 6.4.0.6 |
| CVE-2024-28772 | 5.4 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting Affected: All versions, or not specified |
| CVE-2019-4563 | 5.3 | Oct 29 | IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies Affected: 6.4.0.0 |
| CVE-2019-4547 | 5.3 | Oct 29 | IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associated data Affected: 6.4.0.0 |
| CVE-2019-4562 | 5.3 | Feb 4 | IBM Security Directory Server 6.4.0 stores sensitive information in URLs Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4551 | 5.3 | Feb 4 | IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4550 | 5.3 | Feb 4 | IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points Affected: 6.4.0.0 before 6.4.0.20 |
| CVE-2019-4549 | 5.3 | Oct 2 | IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users Affected: 6.4.0 |
Showing 11