CVE-2019-4541

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Feb 4, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-45426.1IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript codCVE-2019-45457.5IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks. IBM X-Force ID: 1CVE-2019-45468.8After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normCVE-2019-45475.3IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associatCVE-2019-45486.1IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visCVE-2019-45495.3IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attaCVE-2019-45505.3IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.CVE-2019-45515.3IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous useCVE-2019-45526.1IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks. A remote attackerCVE-2019-45537.5IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt higCVE-2019-45555.4IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript codeCVE-2019-45566.5IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application contro
CVE-2019-4541: High severity, CVSS 7.2 | Vulnix