IBM Global Security Kit vulnerabilities

4 CVEs affecting IBM Global Security Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-6747, published 2014-01-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-2191, published 2012-08-08. Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days. IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a…
CVE-2013-6329, published 2013-12-17. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption…
CVE-2013-6747, published 2014-01-27. High severity, CVSS 7.1. EPSS: 2.2% chance of exploitation in the next 30 days. IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service…
CVE-2012-2203, published 2012-08-08. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects…