5.5
Medium
CVE-2022-32755 IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
Description
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Directory Server | 6.4.0 | No fix stated |
Other CVEs of Security Directory Server
The 16 CVEs of Security Directory Server →
CVE-2022-33165
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system
6.8
Medium
CVE-2022-33161
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure…
5.3
Medium
CVE-2019-4563
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies
3.7
Low
CVE-2019-4547
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its…
5.3
Medium