IBM Security Directory Suite vulnerabilities

2 CVEs affecting IBM Security Directory Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-33161, published 2023-10-14.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-32755, published 2023-10-14. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive…
• CVE-2022-33161, published 2023-10-14. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit…