IBM Security Directory Server 6.4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_directory_server:6.4.0:*:*:*:*:*:*:*
part: a version: 6.4.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Directory Server (1e37bd7a-c2f2-5109-9aba-f89ca4079476) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-4549 |
vulnerable | 2026-06-08 05:13:57.291491 |
Details available
MEDIUM (5.3)
IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951.
Published: 2019-10-02T14:45:30.435Z
Updated: 2024-09-16T22:36:36.724Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4542 |
vulnerable | 2026-06-08 05:13:57.281129 |
Details available
MEDIUM (6.1)
IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 165815.
Published: 2019-10-02T14:45:29.955Z
Updated: 2024-09-16T21:02:18.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4539 |
vulnerable | 2026-06-08 05:13:57.280168 |
Details available
HIGH (7.1)
IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812.
Published: 2019-10-02T14:45:29.486Z
Updated: 2024-09-17T00:35:34.193Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4538 |
vulnerable | 2026-06-08 05:13:57.279705 |
Details available
HIGH (7.4)
IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 165660.
Published: 2019-10-02T14:45:29.063Z
Updated: 2024-09-16T18:39:34.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4520 |
vulnerable | 2026-06-08 05:13:57.267523 |
Details available
HIGH (7.5)
IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 165178.
Published: 2019-10-02T14:45:28.645Z
Updated: 2024-09-17T03:18:11.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1977 |
vulnerable | 2026-06-08 05:06:27.114466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.