Vulnerabilities (CVE)

Vendor filter

Ibm Subscribe

Product filter

Security Directory Server Subscribe

Filter

9 total CVE
CVE Vendors Products Updated CVSS
CVE-2019-4549 1 Ibm 1 Security Directory Server 2019-10-09 5.0
IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951.
CVE-2019-4542 1 Ibm 1 Security Directory Server 2019-10-09 4.3
IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2019-4539 1 Ibm 1 Security Directory Server 2019-10-09 5.5
IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812.
CVE-2019-4538 1 Ibm 1 Security Directory Server 2019-10-09 5.8
IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...
CVE-2019-4520 1 Ibm 1 Security Directory Server 2019-10-09 5.0
IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 165178.
CVE-2015-1976 1 Ibm 2 Security Directory Server, Tivoli Directory Server 2019-02-04 2.1
IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.
CVE-2014-6100 1 Ibm 2 Security Directory Server, Tivoli Directory Server 2017-09-08 3.5
Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1...
CVE-2013-6747 1 Ibm 3 Global Security Kit, Security Directory Server, Tivoli Directory Server 2017-08-29 7.1
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509...
CVE-2015-1977 1 Ibm 2 Security Directory Server, Tivoli Directory Server 2016-07-18 5.0
Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory...