Microsoft Active Directory Lightweight Directory Service vulnerabilities

2 CVEs affecting Microsoft Active Directory Lightweight Directory Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3868, published 2013-09-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-3868, published 2013-09-11. Medium severity, CVSS 5.0. EPSS: 36.2% chance of exploitation in the next 30 days. Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows…
• CVE-2013-1282, published 2013-04-09. Medium severity, CVSS 5.0. EPSS: 27% chance of exploitation in the next 30 days. The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD LDS), and Active Directory Services allows remote…