| CVE-2022-32755 |
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
|
5.5
Medium
|
Oct 14, 2023 |
| CVE-2022-33165 |
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system
|
6.8
Medium
|
Oct 14, 2023 |
| CVE-2022-33161 |
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure…
|
5.3
Medium
|
Oct 14, 2023 |
| CVE-2019-4563 |
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies
|
3.7
Low
|
Oct 29, 2020 |
| CVE-2019-4547 |
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its…
|
5.3
Medium
|
Oct 29, 2020 |
| CVE-2019-4562 |
IBM Security Directory Server 6.4.0 stores sensitive information in URLs
|
3.7
Low
|
Feb 4, 2020 |
| CVE-2019-4551 |
IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality…
|
5.3
Medium
|
Feb 4, 2020 |
| CVE-2019-4550 |
IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points
|
5.3
Medium
|
Feb 4, 2020 |
| CVE-2019-4548 |
IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim
|
6.1
Medium
|
Feb 4, 2020 |
| CVE-2019-4541 |
IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass…
|
6.5
Medium
|
Feb 4, 2020 |
| CVE-2019-4540 |
IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
5.9
Medium
|
Feb 4, 2020 |
| CVE-2019-4549 |
IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users
|
5.3
Medium
|
Oct 2, 2019 |
| CVE-2019-4539 |
IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing…
|
7.1
High
|
Oct 2, 2019 |
| CVE-2019-4538 |
IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect…
|
7.4
High
|
Oct 2, 2019 |
| CVE-2019-4542 |
IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Oct 2, 2019 |
| CVE-2019-4520 |
IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to…
|
7.5
High
|
Oct 2, 2019 |