Ibm

Security Directory Server

22 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2019-4550

  • EPSS 0.3%
  • Veröffentlicht 04.02.2020 17:15:12
  • Zuletzt bearbeitet 21.11.2024 04:43:43

IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.

7.2

CVE-2019-4541

  • EPSS 0.13%
  • Veröffentlicht 04.02.2020 17:15:12
  • Zuletzt bearbeitet 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814.

7.5

CVE-2019-4540

  • EPSS 0.17%
  • Veröffentlicht 04.02.2020 17:15:12
  • Zuletzt bearbeitet 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165813.

5.3

CVE-2019-4549

  • EPSS 0.28%
  • Veröffentlicht 02.10.2019 15:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:43

IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951.

6.1

CVE-2019-4542

  • EPSS 0.29%
  • Veröffentlicht 02.10.2019 15:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ...

7.1

CVE-2019-4539

  • EPSS 0.38%
  • Veröffentlicht 02.10.2019 15:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812.

8.2

CVE-2019-4538

  • EPSS 0.28%
  • Veröffentlicht 02.10.2019 15:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof th...

7.5

CVE-2019-4520

  • EPSS 0.51%
  • Veröffentlicht 02.10.2019 15:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:41

IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 165178.

5.5

CVE-2015-1976

  • EPSS 0.08%
  • Veröffentlicht 08.02.2017 22:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.

7.5

CVE-2015-1977

  • EPSS 0.18%
  • Veröffentlicht 15.07.2016 18:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server...