Known vulnerabilities in IBM Security Directory Suite

Vendor: IBM Corporation
Software: IBM Security Directory Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_directory_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 59
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Directory Suite IBM Security Directory Suite is affected by 59 known vulnerabilities: 1 critical, 4 high, 30 medium, 24 low Critical High Medium Low

Vulnerabilities (59)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 8.0.1.24 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 8.0.1.24 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047		 CWE-770 Medium
No
No
 8.0.1.24 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU112132 - Stack-based buffer overflow
CVE-2025-4447		 CWE-121 Medium
No
No
 8.0.1.24 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 8.0.1.24 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 8.0.1.24 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 8.0.1.24 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 8.0.1.24 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU101630 - Sensitive Cookie Without 'HttpOnly' Flag
CVE-2022-33167		 CWE-1004 Low
No
No
 8.0.1.22 11.12.2024 SB2024121121
#VU101626 - Memory corruption
CVE-2022-33162		 CWE-119 Low
No
No
 8.0.1.22 11.12.2024 SB2024121121
#VU101088 - Insufficient Session Expiration
CVE-2022-32759		 CWE-613 Medium
No
No
 8.0.1.21 02.12.2024 SB2024120228
#VU88904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-32754		 CWE-79 Low
No
No
 8.0.1.22 23.04.2024 SB2024042314
SB2024082842
SB2024121121
#VU80939 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-41033		 CWE-300 High
No
No
 8.0.1.21 21.09.2023 SB2023092106
SB2024050308
SB2024082844
and 1 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 8.0.1.21 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 8.0.1.21 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216		 CWE-362 Low
No
No
 8.0.1.21 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU13529 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7658		 CWE-444 Low
No
No
 8.0.1.21 02.07.2018 SB2018070205
SB2018082001
SB2020102711
and 17 more
#VU13528 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7657		 CWE-200 Low
No
No
 8.0.1.21 02.07.2018 SB2018070205
SB2018082001
SB2022040632
and 18 more
#VU13527 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7656		 CWE-444 Low
No
No
 8.0.1.21 30.06.2018 SB2018070205
SB2018082001
SB2022041923
and 17 more
#VU9654 - Information Exposure Through Timing Discrepancy
CVE-2017-9735		 CWE-208 Low
No
No
 8.0.1.21 17.06.2017 SB2017061704
SB2021072132
SB2023042803
and 12 more


Showing elements 1 - 20 out of 59