Vulnerability Monitor

The vendors, products, and vulnerabilities you care about
tivoli_directory_server Vendor: ibm

About This Product

tivoli_directory_server is a software product offered by ibm. This product serves as critical infrastructure in many organizational deployments, making vulnerability monitoring essential for organizations relying on it. Security vulnerabilities in products of this category can affect system availability, data confidentiality, and integrity across entire networks. The moderate vulnerability count reflects ongoing security research and responsible disclosure practices. Regular assessment of known vulnerabilities and timely patching are fundamental components of responsible system administration for any deployment of this software.

Vulnerability Landscape Summary

SecUtils has identified 46 known vulnerabilities affecting ibm tivoli_directory_server. This includes 7 high-severity issues requiring prompt remediation. Vulnerabilities in this product have been disclosed spanning from 2004 to 2018, indicating a sustained research interest and ongoing security attention. 35 medium-severity issues and 4 low-severity issues complete the vulnerability landscape. Organizations should prioritize patching based on deployment context, asset criticality, and exploitation likelihood rather than severity alone.

Known Vulnerabilities
ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2004-2526 2004-12-31 2025-04-03 - 5.0 Likely
CVE-2005-3567 2005-11-16 2025-04-03 - 5.8 Unknown
CVE-2006-0717 2006-02-15 2025-04-03 - 5.0 Likely
CVE-2008-2943 2008-06-30 2025-04-09 - 6.0 Unknown
CVE-2009-3088 2009-09-08 2025-04-09 - 7.5 Likely
CVE-2009-3089 2009-09-08 2025-04-09 - 7.8 Likely
CVE-2009-3090 2009-09-08 2025-04-09 - 5.0 Likely
CVE-2010-0312 2010-01-14 2025-04-09 - 5.0 Likely
CVE-2010-2927 2010-08-02 2025-04-11 - 5.0 Likely
CVE-2010-4216 2010-11-09 2025-04-11 - 5.0 Likely
CVE-2010-4217 2010-11-09 2025-04-11 - 5.0 Likely
CVE-2007-6742 2011-04-21 2025-04-11 - 6.8 Likely
CVE-2007-6743 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2008-7287 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2008-7288 2011-04-21 2025-04-11 - 5.0 Likely
CVE-2008-7289 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2008-7290 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2009-5072 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2009-5073 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2010-4785 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2010-4786 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2010-4787 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2010-4788 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2010-4789 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2011-1206 2011-04-21 2025-04-11 - 10.0 Likely
CVE-2011-1820 2011-04-21 2025-04-11 - 1.7 Unknown
CVE-2011-1821 2011-04-21 2025-04-11 - 4.0 Likely
CVE-2011-1822 2011-04-21 2025-04-11 - 2.1 Unknown
CVE-2011-2758 2011-07-17 2025-04-11 - 5.0 Likely
CVE-2011-2759 2011-07-17 2025-04-11 - 5.0 Likely
CVE-2012-0726 2012-04-22 2025-04-11 - 6.4 Likely
CVE-2012-0740 2012-04-22 2025-04-11 - 4.3 Likely
CVE-2012-0743 2012-04-22 2025-04-11 - 5.0 Likely
CVE-2012-2191 2012-08-08 2025-04-11 - 5.0 Likely
CVE-2012-2203 2012-08-08 2025-04-11 - 7.5 Likely
CVE-2013-6747 2014-01-27 2025-04-11 - 7.1 Likely
CVE-2014-6100 2014-10-19 2025-04-12 - 3.5 Unknown
CVE-2015-0138 2015-03-25 2025-04-12 - 4.3 Likely
CVE-2015-1959 2015-06-28 2025-04-12 - 4.6 Unknown
CVE-2015-1972 2015-06-28 2025-04-12 - 4.3 Likely
CVE-2015-1974 2015-06-28 2025-04-12 - 6.5 Likely
CVE-2015-1978 2015-06-28 2025-04-12 - 4.3 Likely
CVE-2015-2019 2015-06-28 2025-04-12 - 2.1 Unknown
CVE-2015-1977 2016-07-15 2025-04-12 7.5 5.0 Likely
CVE-2015-1976 2017-02-08 2025-04-20 5.5 2.1 Unknown
CVE-2015-1975 2018-04-03 2024-11-21 7.8 4.6 Unknown

How SecUtils Interprets Product Data

SecUtils normalizes and enriches National Vulnerability Database (NVD) records for ibm tivoli_directory_server by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and structuring the data for rapid analysis and asset correlation. For every vulnerability listed, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference information to enable organizations to prioritize patching and risk assessment efficiently. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for vulnerability management and security operations.