Security Verify Directory (Ibm) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-04-23. Vendor: Ibm.
CVEs of Security Verify Directory
- CVE-2025-36074 - CVSS 7.2 (high), 2026-04-23: IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating…
- CVE-2025-1411 - CVSS 7.8 (high), 2025-06-15: IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary…
- CVE-2024-51450 - CVSS 9.1 (critical), 2025-02-06: IBM Security Verify Directory 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a…
- CVE-2024-45650 - CVSS 7.5 (high), 2025-01-31: IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation.
- CVE-2022-33162 - CVSS 9.8 (critical), 2024-08-16: IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a…
- CVE-2024-28772 - CVSS 6.8 (medium), 2024-07-25: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability…
- CVE-2022-32759 - CVSS 7.5 (high), 2024-07-25: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an…
- CVE-2022-32756 - CVSS 2.7 (low), 2024-03-22: IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
- CVE-2022-32754 - CVSS 4.8 (medium), 2024-03-22: IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
- CVE-2022-32751 - CVSS 5.3 (medium), 2024-03-22: IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks against the system. IBM X-Force ID:…
- CVE-2022-32753 - CVSS 6.5 (medium), 2024-03-22: IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.…
- CVE-2022-33161 - CVSS 5.9 (medium), 2023-10-14: IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict…
- CVE-2022-32755 - CVSS 9.1 (critical), 2023-10-14: IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit…
