Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

IBM

IBM Security Directory Server vulnerabilities

16 published CVEs name IBM Security Directory Server among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2022-32755

    IBM Security Directory Server external entity injection

    IBM · Security Directory Server

    Medium5.5
  • CVE-2022-33165

    IBM Security Directory Server information disclosure

    IBM · Security Directory Server

    Medium6.8
  • CVE-2022-33161

    IBM Security Directory Server information disclosure

    IBM · Security Directory Server

    Medium5.3
  • CVE-2019-4563

    IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie…

    IBM · Security Directory Server

    Low3.7
  • CVE-2019-4547

    IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM…

    IBM · Security Directory Server

    Medium5.3
  • CVE-2019-4562

    IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the…

    IBM · Security Directory Server

    Low3.7
  • CVE-2019-4551

    IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to…

    IBM · Security Directory Server

    Medium5.3
  • CVE-2019-4550

    IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.

    IBM · Security Directory Server

    Medium5.3
  • CVE-2019-4548

    IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web…

    IBM · Security Directory Server

    Medium6.1
  • CVE-2019-4541

    IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct…

    IBM · Security Directory Server

    Medium6.5
All 16 in the list