IBM Security Directory Server vulnerabilities

CVEs per yearBy the year they were published

1. 20195
2. 20208
3. 20233

Newest CVEs

• CVE-2022-32755

  IBM Security Directory Server external entity injection

  IBM · Security Directory Server

  Medium5.5
• CVE-2022-33165

  IBM Security Directory Server information disclosure

  IBM · Security Directory Server

  Medium6.8
• CVE-2022-33161

  IBM Security Directory Server information disclosure

  IBM · Security Directory Server

  Medium5.3
• CVE-2019-4563

  IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie…

  IBM · Security Directory Server

  Low3.7
• CVE-2019-4547

  IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM…

  IBM · Security Directory Server

  Medium5.3
• CVE-2019-4562

  IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the…

  IBM · Security Directory Server

  Low3.7
• CVE-2019-4551

  IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to…

  IBM · Security Directory Server

  Medium5.3
• CVE-2019-4550

  IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.

  IBM · Security Directory Server

  Medium5.3
• CVE-2019-4548

  IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web…

  IBM · Security Directory Server

  Medium6.1
• CVE-2019-4541

  IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct…

  IBM · Security Directory Server

  Medium6.5