Apache Directory_ldap_api
3 CVEs affecting Apache Directory_ldap_api. Latest disclosed: 2026-06-01. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1337 | Critical | 9.8 | 2018-07-10 | In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS l… |
CVE-2026-35563 | High | 8.5 | 2026-06-01 | It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the… |
CVE-2015-3250 | High | 7.5 | 2017-09-07 | Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors. |