Skip to content
OpenAdvisories

Product · IBM

Security Verify Directory Integrator

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.8
    CVE-2024-28770

    IBM Security Directory Integrator information disclosure

    IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by …

    IBM Security Directory Integrator Security Verify Directory Integrator
  • Medium 4.8
    CVE-2024-28771

    IBM Security Directory Integrator information disclosure

    IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by …

    IBM Security Directory Integrator Security Verify Directory Integrator
  • Medium 6.8
    CVE-2024-28772

    IBM Security Directory Integrator cross-site scripting

    IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…

    IBM Security Directory Integrator Security Verify Directory Integrator
  • Medium 5.3
    CVE-2022-32759

    IBM Security Directory Server information disclosure

    IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain sensitive information. IBM X-Force ID: 228565.

    IBM Security Directory Integrator Security Verify Directory Integrator