Ibm

Security Directory Server

22 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2019-4550

  • EPSS 0.3%
  • Published 04.02.2020 17:15:12
  • Last modified 21.11.2024 04:43:43

IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.

7.2

CVE-2019-4541

  • EPSS 0.13%
  • Published 04.02.2020 17:15:12
  • Last modified 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814.

7.5

CVE-2019-4540

  • EPSS 0.17%
  • Published 04.02.2020 17:15:12
  • Last modified 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165813.

5.3

CVE-2019-4549

  • EPSS 0.28%
  • Published 02.10.2019 15:15:10
  • Last modified 21.11.2024 04:43:43

IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951.

6.1

CVE-2019-4542

  • EPSS 0.29%
  • Published 02.10.2019 15:15:10
  • Last modified 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ...

7.1

CVE-2019-4539

  • EPSS 0.38%
  • Published 02.10.2019 15:15:10
  • Last modified 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812.

8.2

CVE-2019-4538

  • EPSS 0.28%
  • Published 02.10.2019 15:15:10
  • Last modified 21.11.2024 04:43:42

IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof th...

7.5

CVE-2019-4520

  • EPSS 0.51%
  • Published 02.10.2019 15:15:10
  • Last modified 21.11.2024 04:43:41

IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 165178.

5.5

CVE-2015-1976

  • EPSS 0.08%
  • Published 08.02.2017 22:59:00
  • Last modified 20.04.2025 01:37:25

IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.

7.5

CVE-2015-1977

  • EPSS 0.18%
  • Published 15.07.2016 18:59:00
  • Last modified 12.04.2025 10:46:40

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server...