IBM Director vulnerabilities

6 CVEs affecting IBM Director, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0880, published 2009-03-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0880, published 2009-03-12. Medium severity, CVSS 6.8. EPSS: 31.6% chance of exploitation in the next 30 days. Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot)…
CVE-2009-0879, published 2009-03-12. Medium severity, CVSS 5.0. EPSS: 8.2% chance of exploitation in the next 30 days. The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST…
CVE-2006-4681, published 2006-09-11. Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the file parameter.
CVE-2007-5612, published 2007-11-21. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, connection slot exhaustion, and daemon crash) via a large number of idle…
CVE-2006-4682, published 2006-09-11. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests…
CVE-2006-4683, published 2006-09-11. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.