Security Directory Integrator (Ibm) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2026-05-27. Vendor: Ibm.
CVEs of Security Directory Integrator
- CVE-2024-28765 - CVSS 5.3 (medium), 2026-05-27: IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information…
- CVE-2024-28770 - CVSS 6.5 (medium), 2025-01-27: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or…
- CVE-2024-28766 - CVSS 7.5 (high), 2025-01-27: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that…
- CVE-2024-28771 - CVSS 6.5 (medium), 2025-01-27: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or…
- CVE-2024-28767 - CVSS 8.8 (high), 2024-12-20: IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands…
- CVE-2022-33162 - CVSS 9.8 (critical), 2024-08-16: IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a…
- CVE-2022-33167 - CVSS 7.5 (high), 2024-07-30: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information,…
- CVE-2024-28772 - CVSS 6.8 (medium), 2024-07-25: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability…
- CVE-2022-32759 - CVSS 7.5 (high), 2024-07-25: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an…
- CVE-2022-33165 - CVSS 7.5 (high), 2023-10-14: IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL…
- CVE-2022-33161 - CVSS 5.9 (medium), 2023-10-14: IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict…
- CVE-2022-33164 - CVSS 9.1 (critical), 2023-09-08: IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL…
