Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Security Directory Server — ibm.com/support/pages/node/7047428 Clear all filters
TI-2022-14301 CVE-2022-32755 · GHSA-cp3v-75fh-g783

IBM Security Directory Server external entity injection

Priority MEDIUM 41

IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00921 Published 2023-10-14 No fix listed CWE-91
TI-2022-14599 CVE-2022-33165 · GHSA-2q58-xp4p-xpqc

IBM Security Directory Server information disclosure

Priority LOW 36

IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01559 Published 2023-10-14 No fix listed CWE-22
TI-2022-14595 CVE-2022-33161 · GHSA-53p3-mj4q-6834

IBM Security Directory Server information disclosure

Priority LOW 27

IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00546 Published 2023-10-14 No fix listed CWE-311