Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Active Directory
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-22312 2 Ibm, Microsoft 2 Security Verify Password Synchronization, Active Directory 2023-12-10 4.0 MEDIUM 6.5 MEDIUM
IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.
CVE-2022-22323 2 Ibm, Microsoft 2 Security Verify Password Synchronization, Active Directory 2023-12-10 4.0 MEDIUM 6.5 MEDIUM
IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 218379.
CVE-2013-1282 1 Microsoft 4 Active Directory, Active Directory Application Mode, Active Directory Lightweight Directory Service and 1 more 2023-12-10 5.0 MEDIUM N/A
The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD LDS), and Active Directory Services allows remote attackers to cause a denial of service (memory consumption and service outage) via a crafted query, aka "Memory Consumption Vulnerability."