Known vulnerabilities in 389-ds-base - page 2

Software: 389-ds-base
Software CPE: cpe:2.3:a:389_directory_server_project:389-ds-base:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting 389-ds-base 389-ds-base is affected by 30 known vulnerabilities: 17 medium, 13 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23004 - Cleartext Storage of Sensitive Information
CVE-2018-10871
CWE-312 Low
No
No
1.3.8.5, 1.4.0.12 26.11.2019 SB2018071809
SB2020011623
#VU23003 - Untrusted Pointer Dereference
CVE-2017-2668
CWE-822 Medium
No
No
1.3.5.17, 1.3.6.10 26.11.2019 SB2017042512
#VU16059 - Resource exhaustion
CVE-2018-14648
CWE-400 Low
No
No
1.3.8.4 26.11.2018 SB2018091804
SB2018120714
SB2018110616
and 2 more
#VU15529 - Improper input validation
CVE-2018-10935
CWE-20 Low
No
No
1.3.8.7, 1.4.0.14 23.10.2018 SB2018083010
SB2018102424
SB2019051510
and 2 more
#VU13395 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-10850
CWE-362 Medium
No
No
1.3.8.3, 1.4.0.10 18.06.2018 SB2018062005
SB2018102424
SB2019051510
and 1 more
#VU12522 - Buffer overflow
CVE-2017-2611
CWE-120 Medium
No
No
- 10.05.2018 SB2018051115
#VU12325 - Out-of-bounds read
CVE-2017-2591
CWE-125 Medium
No
No
- 02.05.2018 SB2016120107
#VU11126 - Improper Authentication
CVE-2017-15135
CWE-287 Low
No
No
- 16.03.2018 SB2018012209
SB2018040603
SB2019051510
and 2 more
#VU10911 - Out-of-bounds read
CVE-2018-1054
CWE-125 Low
No
No
- 12.03.2018 SB2018031201
SB2018040603
SB2018031339
and 1 more
#VU8118 - Improper Restriction of Excessive Authentication Attempts
CVE-2017-7551
CWE-307 Low
No
No
- 06.09.2017 SB2017073111
SB2017090605
SB2017100211


Showing elements 21 - 40 out of 30