Filtered by vendor Ibm Subscriptions
Filtered by product Security Directory Server Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-4538 1 Ibm 1 Security Directory Server 2024-11-21 8.2 High
IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 165660.
CVE-2019-4520 1 Ibm 1 Security Directory Server 2024-11-21 7.5 High
IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 165178.