Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_directory_server:6.4.0:*:*:*:*:*:*:*

part: a version: 6.4.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Directory Server (dd20397e-23a0-57cd-ada5-2cb8cbc0c9e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2019 vulnerable 2026-06-08 05:06:27.268383 Details available
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1978 vulnerable 2026-06-08 05:06:27.129329 Details available
Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1975 vulnerable 2026-06-08 05:06:27.014223 Details available
The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694.
Published: 2018-04-03T22:00:00.000Z
Updated: 2024-08-06T05:02:42.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1974 vulnerable 2026-06-08 05:06:27.013794 Details available
The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote authenticated users to bypass intended command restrictions via unspecified vectors.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1972 vulnerable 2026-06-08 05:06:27.013381 Details available
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to obtain sensitive error-log information via a crafted POST request.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:43.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1959 vulnerable 2026-06-08 05:06:26.981297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.