Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.0:*:*:*:*:*:*:*

part: a version: 6.3.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Directory Server (dd20397e-23a0-57cd-ada5-2cb8cbc0c9e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2019 vulnerable 2026-06-08 05:06:27.268345 Details available
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1978 vulnerable 2026-06-08 05:06:27.129292 Details available
Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1977 vulnerable 2026-06-08 05:06:27.057264 Details available
Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
Published: 2016-07-15T18:00:00.000Z
Updated: 2024-08-06T05:02:42.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1975 vulnerable 2026-06-08 05:06:27.014189 Details available
The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694.
Published: 2018-04-03T22:00:00.000Z
Updated: 2024-08-06T05:02:42.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1974 vulnerable 2026-06-08 05:06:27.013760 Details available
The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote authenticated users to bypass intended command restrictions via unspecified vectors.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1972 vulnerable 2026-06-08 05:06:27.013346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1959 vulnerable 2026-06-08 05:06:26.980217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0138 vulnerable 2026-06-08 05:06:13.770193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6100 vulnerable 2026-06-08 05:05:56.313148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0740 vulnerable 2026-06-08 05:00:44.689800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1820 vulnerable 2026-06-08 04:58:02.188526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1206 vulnerable 2026-06-08 04:57:56.955492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4789 vulnerable 2026-06-08 04:56:31.019068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.