Advisories · Technology
Apache Software Foundation Apache Directory LDAP API.
Every CVE that names Apache Software Foundation Apache Directory LDAP API among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Apache Directory LDAP API: Denial of service via crafted telephone number values
- Apache Software Foundation Apache Directory LDAP API
- Denial of service
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements
- Apache Software Foundation Apache Directory LDAP API
- Insecure deserialization
- CVSS 7.5 High
Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords
- Apache Software Foundation Apache Directory LDAP API
- CWE-405
- CVSS 7.5 High
Apache Directory LDAP API: Injection of plaintext responses during StartTLS
- Apache Software Foundation Apache Directory LDAP API
- CWE-345
- CVSS 7.3 High
Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder
- Apache Software Foundation Apache Directory LDAP API
- Memory corruption
- CVSS 7.5 High
Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode
- Apache Software Foundation Apache Directory LDAP API
- Denial of service