Known vulnerabilities in IBM Security Directory Server

Vendor: IBM Corporation
Software: IBM Security Directory Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_directory_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 22
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Directory Server IBM Security Directory Server is affected by 22 known vulnerabilities: 2 high, 13 medium, 7 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88906 - Inadequate Encryption Strength
CVE-2022-32753		 CWE-326 Low
No
No
 6.4.0.28 23.04.2024 SB2024042314
SB2024050219
SB2024082842
#VU88905 - Information Exposure Through an Error Message
CVE-2022-32756		 CWE-209 Low
No
No
 6.4.0.28 23.04.2024 SB2024042314
SB2024082842
#VU88904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-32754		 CWE-79 Low
No
No
 6.4.0.28 23.04.2024 SB2024042314
SB2024082842
SB2024121121
#VU88406 - Exposure of sensitive information to an unauthorized actor
CVE-2022-32751		 CWE-200 Medium
No
No
 6.4.0.28 10.04.2024 SB2024041059
SB2024050219
SB20240827139
#VU76906 - Out-of-bounds read
CVE-2023-2597		 CWE-125 High
No
No
 6.4.0.28 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342		 CWE-326 Medium
No
No
 6.4.0.28 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 6.4.0.28 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 6.4.0.28 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 6.4.0.28 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 6.4.0.28 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 6.4.0.28 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 6.4.0.28 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 6.4.0.28 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 6.4.0.27 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU65845 - Authentication Bypass by Spoofing
CVE-2022-22476		 CWE-290 Medium
No
No
 6.4.0.27 28.07.2022 SB2022072816
SB2022080903
SB2022082228
and 29 more
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 6.4.0.27 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU59281 - Resource exhaustion
CVE-2021-38951		 CWE-400 High
No
No
 6.4.0.27 06.01.2022 SB2022010631
SB2022010632
SB2022021421
and 2 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 6.4.0.27 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57496 - Improper input validation
CVE-2021-35603		 CWE-20 Low
No
No
 6.4.0.27 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU52449 - Improper input validation
CVE-2021-2163		 CWE-20 Medium
No
No
 6.4.0.27 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more


Showing elements 1 - 20 out of 22