Security Directory Server at a glance
- Last 12 months
- 0
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
16 results · Feed
-
Medium 5.5
IBM Security Directory Server external entity injection
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505.
-
Medium 6.8
IBM Security Directory Server information disclosure
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 228582.
-
Medium 5.3
IBM Security Directory Server information disclosure
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man …
-
Low 3.7
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attac…
-
Medium 5.3
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environmen…
-
Medium 5.3
IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality a…
-
Low 3.7
IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if un…
-
Medium 6.1
IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persu…
-
Medium 6.5
IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass …
-
Medium 5.3
IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM…
-
Medium 5.9
IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to …
-
Medium 5.3
IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used …
-
High 7.1
IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attack…
-
Medium 6.1
IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…
-
High 7.4
IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect a…
-
High 7.5
IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to br…