6.1
Moyenne
CVE-2019-4542 IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting
Description
IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 165815.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Directory Server | 6.4.0 | Pas de correctif indiqué |
Autres CVE de Security Directory Server
Les 16 CVE de Security Directory Server →
CVE-2022-32755
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
5.5
Moyenne
CVE-2022-33165
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system
6.8
Moyenne
CVE-2022-33161
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure…
5.3
Moyenne
CVE-2019-4563
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies
3.7
Faible