6.1
Medium
CVE-2019-4542 IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting
Description
IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 165815.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Directory Server | 6.4.0 | No fix stated |
Other CVEs of Security Directory Server
The 16 CVEs of Security Directory Server →
CVE-2022-32755
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
5.5
Medium
CVE-2022-33165
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system
6.8
Medium
CVE-2022-33161
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure…
5.3
Medium
CVE-2019-4563
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies
3.7
Low