Vulnerability · Published Sep 12, 2024 · Assigned by OpenText
CVE-2021-22532Possible NLDAP Denial of Service attack Vulnerability
High 7.6
In plain English
A high-severity resource allocation without limits in eDirectory from OpenText. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.1)7.6High
Exploit odds (30 days)0.4%top 69.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenText | eDirectory | 9.2.4.0000 – before < |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H