Directory Ldap Api (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 78 known versions, newest CVE from 2026-06-01. Vendor: Apache.

CVEs of Directory Ldap Api

• CVE-2026-35563 - CVSS 8.8 (high), 2026-06-01: It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the…
• CVE-2018-1337 - CVSS 9.8 (critical), 2018-07-10: In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS…
• CVE-2015-3250 - CVSS 7.5 (high), 2017-09-07: Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.