IBM Rational Directory Server vulnerabilities

4 CVEs affecting IBM Rational Directory Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3089, published 2014-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-2191, published 2012-08-08. Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days. IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a…
CVE-2013-0599, published 2013-05-28. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by…
CVE-2012-2203, published 2012-08-08. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects…
CVE-2014-3089, published 2014-08-22. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002,…