CVE-2017-9277: Novell Edirectory

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA.

Affected products

• Novell Edirectory: up to and including 9.0; version 9.0 only

Published 2018-03-02. Last modified 2026-06-17.