Tivoli Directory Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:tivoli_directory_server:6.2:*:*:*:*:*:*:*
part: a version: 6.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Tivoli Directory Server (dd20397e-23a0-57cd-ada5-2cb8cbc0c9e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-6100 |
vulnerable | 2026-06-08 05:05:56.300169 |
Details available
Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-10-19T01:00:00.000Z
Updated: 2024-08-06T12:03:02.326Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0740 |
vulnerable | 2026-06-08 05:00:44.688147 |
Details available
Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-04-22T18:00:00.000Z
Updated: 2024-08-06T18:38:13.440Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2759 |
vulnerable | 2026-06-08 04:58:09.104009 |
Details available
The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Published: 2011-07-17T20:00:00.000Z
Updated: 2024-08-06T23:08:23.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2758 |
vulnerable | 2026-06-08 04:58:09.103534 |
Details available
IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL.
Published: 2011-07-17T20:00:00.000Z
Updated: 2024-09-16T22:08:50.211Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0312 |
vulnerable | 2026-06-08 04:52:01.812435 |
Details available
The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SecureWay 3.2 Event Registration Request (aka a 1.3.18.0.2.12.1 request).
Published: 2010-01-14T19:00:00.000Z
Updated: 2024-09-16T16:42:43.078Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.