ibm tivoli directory server

Name: ibm tivoli directory server
Brand: ibm

productUS

cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical7high35medium4low

updated 2026-10-28

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2011-1206US	high10.0	15.7% (97th)	Exploit	no fix	2011-04-21	84 versions
CVE-2006-0717US	medium5.0	9.65% (95th)	Exploit	no fix	2006-02-15	= 6.0
CVE-2004-2526US	medium5.0	9.25% (95th)	Exploit	no fix	2004-12-31	2 versions
CVE-2008-2943US	medium6.0	2.42% (84th)	Exploit	no fix	2008-06-30	16 versions
CVE-2012-2191US	medium5.0	3.88% (90th)	—	no fix	2012-08-08	—
CVE-2015-0138US	medium4.3	2.79% (86th)	—	no fix	2015-03-25	140 versions
CVE-2015-1974US	medium6.5	2.41% (84th)	—	no fix	2015-06-28	6 versions
CVE-2012-0726US	medium6.4	2.28% (83rd)	—	no fix	2012-04-22	19 versions
CVE-2013-6747US	high7.1	2.24% (83rd)	—	no fix	2014-01-27	—
CVE-2015-1972US	medium4.3	2.20% (82nd)	—	no fix	2015-06-28	6 versions
CVE-2015-1978US	medium4.3	2.17% (82nd)	—	no fix	2015-06-28	6 versions
CVE-2011-2758US	medium5.0	2.13% (82nd)	—	no fix	2011-07-17	4 versions
CVE-2012-0740US	medium4.3	1.93% (80th)	—	no fix	2012-04-22	9 versions
CVE-2009-3088US	high7.5	1.92% (80th)	—	no fix	2009-09-08	= 6.0
CVE-2009-3089US	high7.8	1.79% (78th)	—	no fix	2009-09-08	= 6.0
CVE-2010-4217US	medium5.0	1.75% (78th)	—	no fix	2010-11-09	24 versions
CVE-2010-0312US	medium5.0	1.73% (77th)	—	no fix	2010-01-14	= 6.2
CVE-2012-0743US	medium5.0	1.71% (77th)	—	no fix	2012-04-22	19 versions
CVE-2015-1977US	high7.5	1.68% (77th)	—	no fix	2016-07-15	162 versions
CVE-2009-3090US	medium5.0	1.62% (76th)	—	no fix	2009-09-08	= 6.0
CVE-2010-2927US	medium5.0	1.59% (76th)	—	no fix	2010-08-02	3 versions
CVE-2012-2203US	high7.5	1.58% (75th)	—	no fix	2012-08-08	—
CVE-2010-4216US	medium5.0	1.44% (73rd)	—	no fix	2010-11-09	3 versions
CVE-2011-2759US	medium5.0	1.32% (71st)	—	no fix	2011-07-17	4 versions
CVE-2010-4785US	medium4.0	1.28% (70th)	—	no fix	2011-04-21	20 versions
CVE-2010-4789US	medium4.0	1.14% (66th)	—	no fix	2011-04-21	24 versions
CVE-2008-7288US	medium5.0	1.10% (66th)	—	no fix	2011-04-21	2 versions
CVE-2007-6742US	medium6.8	0.97% (62nd)	—	no fix	2011-04-21	2 versions
CVE-2014-6100US	low3.5	0.94% (61st)	—	no fix	2014-10-19	75 versions
CVE-2005-3567US	medium5.8	0.92% (60th)	—	no fix	2005-11-16	2 versions
CVE-2011-1821US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	2 versions
CVE-2010-4788US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	20 versions
CVE-2010-4787US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	21 versions
CVE-2010-4786US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	21 versions
CVE-2009-5073US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	17 versions
CVE-2009-5072US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	19 versions
CVE-2008-7290US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	2 versions
CVE-2008-7289US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	2 versions
CVE-2008-7287US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	2 versions
CVE-2007-6743US	medium4.0	0.88% (59th)	—	no fix	2011-04-21	2 versions
CVE-2015-1975US	high7.8	0.47% (41st)	—	no fix	2018-04-03	6 versions
CVE-2015-2019US	low2.1	0.43% (37th)	—	no fix	2015-06-28	6 versions
CVE-2015-1959US	medium4.6	0.35% (29th)	—	no fix	2015-06-28	6 versions
CVE-2015-1976US	medium5.5	0.35% (28th)	—	no fix	2017-02-08	4 versions
CVE-2011-1820US	low1.7	0.35% (28th)	—	no fix	2011-04-21	84 versions
CVE-2011-1822US	low2.1	0.29% (21st)	—	no fix	2011-04-21	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-399CWE-39915 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-264CWE-2643 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-287Improper Authentication2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan