Skip to content
OpenAdvisories

Product · IBM

Security Directory Server

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-32755

    IBM Security Directory Server external entity injection

    IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505.

    IBM Security Directory Server
  • Medium 6.8
    CVE-2022-33165

    IBM Security Directory Server information disclosure

    IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 228582.

    IBM Security Directory Server
  • Medium 5.3
    CVE-2022-33161

    IBM Security Directory Server information disclosure

    IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man …

    IBM Security Directory Server
  • Medium 5.3
    CVE-2019-4547

    IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environmen…

    IBM Security Directory Server
  • Medium 5.3
    CVE-2019-4551

    IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality a…

    IBM Security Directory Server
  • Medium 6.1
    CVE-2019-4548

    IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persu…

    IBM Security Directory Server
  • Medium 6.5
    CVE-2019-4541

    IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass …

    IBM Security Directory Server
  • Medium 5.3
    CVE-2019-4550

    IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM…

    IBM Security Directory Server
  • Medium 5.9
    CVE-2019-4540

    IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to …

    IBM Security Directory Server
  • Medium 5.3
    CVE-2019-4549

    IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used …

    IBM Security Directory Server
  • Medium 6.1
    CVE-2019-4542

    IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…

    IBM Security Directory Server