Lucene search

K
IbmSecurity Verify Directory Integrator10.0.0

7 matches found

CVE
CVE
added 2024/07/25 6:15 p.m.65 views

CVE-2024-28772

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...

6.8CVSS5.9AI score0.00162EPSS
CVE
CVE
added 2024/08/16 7:15 p.m.58 views

CVE-2022-33162

IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the privilege level of a standard unprivileged user. IBM X-Force ID:...

9.8CVSS7.8AI score0.00206EPSS
CVE
CVE
added 2024/07/30 5:15 p.m.48 views

CVE-2022-33167

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cook...

7.5CVSS3.7AI score0.00067EPSS
CVE
CVE
added 2024/07/25 6:15 p.m.44 views

CVE-2022-32759

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain sensitive information. IBM X-Force ID: 228565.

7.5CVSS5AI score0.00098EPSS
CVE
CVE
added 2025/01/27 2:15 a.m.30 views

CVE-2024-28770

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user go...

6.5CVSS4.9AI score0.00018EPSS
CVE
CVE
added 2025/01/27 2:15 a.m.29 views

CVE-2024-28766

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.

7.5CVSS3.3AI score0.00041EPSS
CVE
CVE
added 2025/01/27 2:15 a.m.28 views

CVE-2024-28771

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user go...

6.5CVSS4.9AI score0.00018EPSS