IBM Tivoli Directory Server 6.2.0.20
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.20:*:*:*:*:*:*:*
part: a version: 6.2.0.20 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Tivoli Directory Server (dd20397e-23a0-57cd-ada5-2cb8cbc0c9e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-1977 |
vulnerable | 2026-06-08 05:06:27.041068 |
Details available
Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
Published: 2016-07-15T18:00:00.000Z
Updated: 2024-08-06T05:02:42.885Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0138 |
vulnerable | 2026-06-08 05:06:13.759128 |
Details available
GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.
Published: 2015-03-25T01:00:00.000Z
Updated: 2024-08-06T04:03:09.863Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6100 |
vulnerable | 2026-06-08 05:05:56.310132 |
Details available
Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-10-19T01:00:00.000Z
Updated: 2024-08-06T12:03:02.326Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0743 |
vulnerable | 2026-06-08 05:00:44.696545 |
Details available
IBM Tivoli Directory Server (TDS) 6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via a malformed LDAP paged search request.
Published: 2012-04-22T18:00:00.000Z
Updated: 2024-08-06T18:38:13.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0740 |
vulnerable | 2026-06-08 05:00:44.688227 |
Details available
Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-04-22T18:00:00.000Z
Updated: 2024-08-06T18:38:13.440Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0726 |
vulnerable | 2026-06-08 05:00:44.643639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.