3
389 Directory Server
Security Risk Profile
25
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 31, 2022 to present
8
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
4.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
25/100
low
📈 1 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
6Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
1
Most Affected Products
1. redhat Enterprise Linux8
2. 389 Directory Server 389-ds-base6
3. redhat Directory Server5
4. redhat 389 Directory Server2
5. 389 Directory Server 389 Directory Server1
Recent Vulnerabilities
See more →CVE-2026-19404
CVSS 6.5medium
389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance
Aug 10, 2026🔧 No Patch
REDHAT-BUG-2510617
CVSS 4.0medium
Aug 3, 2026🔧 No Patch
CVE-2026-15722
CVSS 7.5high
389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
Jul 14, 2026🔧 No Patch
REDHAT-BUG-2498022
CVSS 1.0low
Jul 8, 2026🔧 No Patch
CVE-2026-14940
CVSS 5.3medium
389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn
Jul 7, 2026🔧 No Patch
REDHAT-BUG-2497697
CVSS 4.0medium
Jul 7, 2026🔧 No Patch
REDHAT-BUG-2484802
CVSS 4.0medium
Jun 4, 2026🔧 No Patch
REDHAT-BUG-2091781
CVSS 4.0medium
May 31, 2022🔧 No Patch
Monitor 389 Directory Server in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.