Apache Software Foundation Apache Directory LDAP API vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Latest Apache Software Foundation Apache Directory LDAP API vulnerabilities

CVE-2026-103885 — Apache Directory LDAP API: Denial of service via crafted telephone number values (CVSS 7.5)
CVE-2026-103880 — Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords (CVSS 7.5)
CVE-2026-103878 — Apache Directory LDAP API: Injection of plaintext responses during StartTLS (CVSS 7.5)
CVE-2026-103877 — Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements (CVSS 9.8)
CVE-2026-103552 — Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder (CVSS 7.3)
CVE-2026-102731 — Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode (CVSS 7.5)
CVE-2026-35563 — Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostname (CVSS 8.5)
CVE-2018-1337 — (CVSS 9.8)
CVE-2015-3250 — (CVSS 7.5)