Vulnerability record · CVE-2015-1975 · published 3 April 2018

CVE-2015-1975: Ibm tivoli directory server injection vulnerability

Ibm · Tivoli Directory Server

The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694.

7.8 CVSS 3.0 High EPSS 0.47% · top 61.7% CWE-74 · Injection

7.8CVSS 3.0 base score, v2 4.6

0.47%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Tivoli Directory Server Ibm

References

Link	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21960659	Vendor Advisory
http://www.securityfocus.com/bid/103717	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/103694	VDB EntryVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21960659	Vendor Advisory
http://www.securityfocus.com/bid/103717	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/103694	VDB EntryVendor Advisory

Track CVE-2015-1975 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-1206Ibm tivoli directory server memory buffer overflow vulnerabilityStack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before…EPSS 16%21 Apr 2011 7.8CVE-2009-3089Ibm tivoli directory server vulnerabilityIBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecifie…EPSS 1.8%8 Sep 2009 7.5CVE-2015-1977Ibm tivoli directory server information exposure vulnerabilityDirectory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before …EPSS 1.7%15 Jul 2016 7.5CVE-2012-2203Ibm global security kit permissions and access controls vulnerabilityIBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses…EPSS 1.6%8 Aug 2012 7.5CVE-2009-3088Ibm tivoli directory server memory buffer overflow vulnerabilityHeap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via u…EPSS 1.9%8 Sep 2009 7.1CVE-2013-6747Ibm global security kit improper input validation vulnerabilityIBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows rem…EPSS 2.2%27 Jan 2014 6.8CVE-2007-6742Ibm tivoli directory server vulnerabilityThe get_filter_list function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter par…EPSS 0.97%21 Apr 2011 6.5CVE-2015-1974Ibm tivoli directory server permissions and access controls vulnerabilityThe web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6…EPSS 2.4%28 Jun 2015

Source: NIST National Vulnerability Database (record CVE-2015-1975), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.