threat
engine
.sh
Back
·
··:··
Home
/
Product
/
ibm security verify directory
Product
ibm security verify directory
10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2025-36074
>= 10.0.0 and <= 10.0.3
IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious f
5.5
MEDIUM
CVE-2025-1411
>= 10.0.0 and <= 10.0.3.1
IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to exec
7.8
HIGH
CVE-2024-51450
>= 10.0.0 and <= 10.0.3
IBM Security Verify Directory 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on t
9.1
CRITICAL
CVE-2024-45650
>= 10.0.0 and <= 10.0.3
IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation.
7.5
HIGH
CVE-2022-32756
all versions
IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error
2.7
LOW
CVE-2022-32754
all versions
IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav
4.8
MEDIUM
CVE-2022-32753
all versions
IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi
4.5
MEDIUM
CVE-2022-32751
all versions
IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks against the
5.3
MEDIUM
CVE-2022-33161
all versions
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to proper
5.3
MEDIUM
CVE-2022-32755
all versions
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A rem
5.5
MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin