Apache Directory Studio vulnerabilities

2 CVEs affecting Apache Directory Studio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-33900, published 2021-07-26.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-5349, published 2016-04-11. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a…
• CVE-2021-33900, published 2021-07-26. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating…