Login Request a demo
LE
Product
lemonldap-ng
by lemonldap-ng · last CVE Jun 21, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 6High 4Medium 4Low 0
Severity
All severities15Critical6High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lemonldap-ng to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19791
9.8
1%
May 29
In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/REST endpoints (when some LemonLDAP::NG…
Affected: before 2.0.7
CVE-2023-28862
9.8
1%
Mar 31
An issue was discovered in LemonLDAP::NG before 2.16.1
Affected: before 2.16.1
CVE-2021-40874
9.8
1%
Jul 18
An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13
Affected: 2.0.13
CVE-2020-24660
9.8
2%
Sep 14
An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used
Affected: through 2.0.8
CVE-2019-15941
9.8
2%
Sep 25
OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request
Affected: 2.0.0 through 2.0.5
CVE-2019-12046
9.8
3%
May 22
LemonLDAP::NG -2.0.3 has Incorrect Access Control
Affected: 2.0.3
Showing 6