Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_directory_server:6.1.0:*:*:*:*:*:*:*

part: a version: 6.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Directory Server (dd20397e-23a0-57cd-ada5-2cb8cbc0c9e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2019 vulnerable 2026-06-08 05:06:27.268303 Details available
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1978 vulnerable 2026-06-08 05:06:27.129254 Details available
Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1977 vulnerable 2026-06-08 05:06:27.077229 Details available
Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
Published: 2016-07-15T18:00:00.000Z
Updated: 2024-08-06T05:02:42.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1975 vulnerable 2026-06-08 05:06:27.014149 Details available
The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694.
Published: 2018-04-03T22:00:00.000Z
Updated: 2024-08-06T05:02:42.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1974 vulnerable 2026-06-08 05:06:27.013725 Details available
The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote authenticated users to bypass intended command restrictions via unspecified vectors.
Published: 2015-06-28T15:00:00.000Z
Updated: 2024-08-06T05:02:42.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1972 vulnerable 2026-06-08 05:06:27.013309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1959 vulnerable 2026-06-08 05:06:26.979099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0138 vulnerable 2026-06-08 05:06:13.717433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6100 vulnerable 2026-06-08 05:05:56.276189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0743 vulnerable 2026-06-08 05:00:44.696430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0726 vulnerable 2026-06-08 05:00:44.639845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.