Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Security Directory Suite VA — ibm.com/support/pages/node/7001693 Clear all filters
TI-2022-14298 CVE-2022-32752 · GHSA-g82m-ffq2-47q8

IBM Security Directory Suite VA command execution

Priority MEDIUM 43

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01361 Published 2023-06-15 No fix listed CWE-78
TI-2022-14303 CVE-2022-32757 · GHSA-qmcq-8c6w-84fw

IBM Security Directory Suite VA information disclosure

Priority MEDIUM 40

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00855 Published 2023-06-15 No fix listed CWE-307
TI-2022-14600 CVE-2022-33166 · GHSA-fwrm-7p3m-q253

IBM Security Directory Suite VA file upload

Priority LOW 35

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00787 Published 2023-06-15 No fix listed CWE-434
TI-2022-14593 CVE-2022-33159 · GHSA-7cp5-xc65-xx7h

IBM Security Directory Suite VA information disclosure

Priority LOW 29

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 stores user credentials in plain clear text which can be read by an authenticated user.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00341 Published 2023-06-15 No fix listed CWE-200