Security Directory Suite vulnerabilities

2 known vulnerabilities in Security Directory Suite from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Security Directory Server: Improper Restriction of XML External Entity Reference

  CVE-2022-32755Oct 14, 2023IBM

  IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505.

• 7.5 High severity

  Security Directory Suite: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2022-33160Oct 6, 2023IBM

  IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568.