fedoraproject 389 directory server

Name: fedoraproject 389 directory server
Brand: fedoraproject

productUS

cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical15high18medium5low

updated 2026-10-28

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-3883US	high7.5	8.20% (95th)	—	no fix	2019-04-17	≤ 1.4.1.2
CVE-2018-14648US	high7.5	7.17% (94th)	—	1.4.0.17	2018-09-28	< 1.4.0.17
CVE-2018-1054US	high7.5	4.56% (92nd)	—	no fix	2018-03-07	≤ 1.4.0.6
CVE-2018-1089US	high7.5	4.01% (91st)	—	1.3.6.15	2018-05-09	4 versions
CVE-2016-0741US	high7.5	3.96% (90th)	—	no fix	2016-04-19	4 versions
CVE-2017-15134US	high7.5	3.87% (90th)	—	1.3.6.13	2018-03-01	3 versions
CVE-2017-15135US	high8.1	3.83% (90th)	—	no fix	2018-01-24	1.3.6.1 → 1.4.0.3
CVE-2017-2591US	high7.5	2.81% (86th)	—	1.3.6	2018-04-30	< 1.3.6
CVE-2013-0312US	medium5.0	2.73% (86th)	—	no fix	2013-03-13	≤ 1.3.0.3
CVE-2018-14638US	high7.5	2.65% (86th)	—	1.3.8.4	2018-09-14	< 1.3.8.4
CVE-2017-2668US	medium6.5	2.59% (85th)	—	1.3.5.17	2018-06-22	2 versions
CVE-2015-3230US	high7.5	2.57% (85th)	—	no fix	2015-10-29	≤ 1.3.3.10
CVE-2013-4283US	medium5.0	2.43% (84th)	—	no fix	2013-09-10	6 versions
CVE-2018-14624US	high7.5	2.38% (84th)	—	no fix	2018-09-06	3 versions
CVE-2014-3562US	medium5.0	2.20% (82nd)	—	no fix	2014-08-21	44 versions
CVE-2014-0132US	medium6.5	2.19% (82nd)	—	no fix	2014-03-18	18 versions
CVE-2015-1854US	high7.5	2.14% (82nd)	—	no fix	2017-09-19	≤ 1.3.3.9
CVE-2014-8105US	medium5.0	2.11% (82nd)	—	no fix	2015-03-10	6 versions
CVE-2013-1897US	low2.6	2.10% (82nd)	—	no fix	2013-05-13	34 versions
CVE-2013-4485US	medium4.0	1.99% (81st)	—	no fix	2013-11-23	= 1.2.11.15
CVE-2012-4450US	medium6.0	1.86% (79th)	—	no fix	2012-10-01	= 1.2.10
CVE-2013-2219US	medium4.0	1.76% (78th)	—	no fix	2013-07-31	—
CVE-2014-8112US	medium4.0	1.69% (77th)	—	no fix	2015-03-10	43 versions
CVE-2010-4746US	medium5.0	1.66% (77th)	—	no fix	2011-02-23	7 versions
CVE-2018-10850US	medium5.9	1.54% (75th)	—	1.4.0.10	2018-06-13	< 1.4.0.10
CVE-2011-0019US	high7.5	1.42% (73rd)	—	no fix	2011-02-23	= 1.2.7.5
CVE-2017-7551US	critical9.8	1.42% (73rd)	—	no fix	2017-08-16	2 versions
CVE-2011-1067US	medium5.0	1.42% (73rd)	—	no fix	2011-02-23	9 versions
CVE-2019-10171US	high7.5	1.40% (72nd)	—	1.4.0.17	2019-08-02	1.4.0.0 → 1.4.0.17
CVE-2012-2746US	low2.1	1.33% (71st)	—	no fix	2012-07-03	21 versions
CVE-2019-14824US	medium6.5	1.31% (70th)	—	no fix	2019-11-08	—
CVE-2011-0704US	medium5.9	1.18% (67th)	—	no fix	2018-05-04	= 1.2.7.5
CVE-2018-10871US	high7.2OT elevated	1.13% (66th)	—	1.3.8.5	2018-07-18	2 versions
CVE-2012-0833US	low2.3	0.90% (60th)	—	no fix	2012-07-03	15 versions
CVE-2012-2678US	low1.2	0.64% (50th)	—	no fix	2012-07-03	21 versions
CVE-2019-10224US	medium4.6	0.40% (34th)	—	1.4.1.3	2019-11-25	1.4.0.0 → 1.4.1.3
CVE-2011-0022US	medium4.7	0.29% (22nd)	—	no fix	2011-02-23	9 versions
CVE-2011-0532US	medium6.2	0.28% (21st)	—	no fix	2011-02-23	9 versions
CVE-2010-3282US	low3.3OT elevated	0.26% (18th)	—	1.2.7.1	2020-01-09	< 1.2.7.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-264CWE-2645 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-399CWE-3993 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan