CVE-2015-1975

7.8 highEPSS 0.5%

The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2018-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_directory_server

References

http://www-01.ibm.com/support/docview.wss?uid=swg21960659
http://www.securityfocus.com/bid/103717
https://exchange.xforce.ibmcloud.com/vulnerabilities/103694
http://www-01.ibm.com/support/docview.wss?uid=swg21960659
http://www.securityfocus.com/bid/103717

Check your stack JSON