How many CVEs does 389ds have?

389ds has 11 published CVE records since 2017, including 3 in the last two years.

How many 389ds CVEs are in CISA KEV?

None of 389ds's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which 389ds products have the most CVEs?

The 389ds products with the most published CVEs are 389-ds-base.

What are the most common weakness types in 389ds CVEs?

389ds's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-230 (Improper Handling of Missing Values).

Are there public exploits for 389ds vulnerabilities?

Yes — 1 of 389ds's CVEs have a known public exploit.

What is the average severity of 389ds CVEs?

The average CVSS base score across 389ds's scored CVEs is 6.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

11 CVEs

389ds Vulnerabilities

Name: 389ds vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for 389ds.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.3

Avg CVSS

2017–2026

Overview

389ds has 11 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting 389ds products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on 389ds's vulnerability posture, as a share of its 11 published CVEs.

Average CVSS: 6.3
Critical / high: 27%
Actively exploited (KEV): 0%
Public exploit available: 9%
Patch available: 100%

Severity and exploitation

How the CVSS severity of 389ds's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium8

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of 389ds's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of 389ds's CVEs has a known public exploit available.

Most affected products

The 389ds products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

389-ds-base11 CVEs

Common weakness types

The CWE weakness categories most often found in 389ds CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish 389ds CVE records.

redhat11 CVEs

Disclosure activity by year

How many 389ds CVEs were published each year.

2017

1

2021

1

2022

2

2024

4

2025

1

2026

2

Latest 389ds CVEs

The most recently disclosed vulnerabilities affecting 389ds.

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind
CWE-122
High · CVSS 8.8
EPSS 0.6%2026-07-07
389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()
CWE-787
Medium · CVSS 5.4
EPSS 0.2%2026-06-17
389-ds-base: null pointer dereference leads to denial of service
CWE-476
Medium · CVSS 4.9
EPSS 0.6%2025-03-18
389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)
CWE-20
Medium · CVSS 5.7
EPSS 0.4%2024-09-05
389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request
CWE-230
Medium · CVSS 6.5
EPSS 0.9%2024-07-09
389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c
CWE-20
Medium · CVSS 5.7
EPSS 0.6%2024-05-28
389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
CWE-122
Medium · CVSS 5.5
EPSS 0.3%2024-02-12
Medium vulnerability · 2022-04-18
CWE-287
Medium · CVSS 6.5
EPSS 1.4%2022-04-18
High vulnerability · 2022-03-16
High · CVSS 7.5
EPSS 5.9%2022-03-16
Medium vulnerability · 2021-03-26
CWE-200
Medium · CVSS 5.3
EPSS 1.5%2021-03-26
High vulnerability · 2017-06-08
High · CVSS 7.5
EPSS 2.4%2017-06-08

Track new 389ds CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor 389ds CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft25,694 CVEs linux21,037 CVEs Google15,679 CVEs Apple14,792 CVEs Oracle11,815 CVEs Debian10,221 CVEs IBM8,381 CVEs Red Hat7,830 CVEs

Browse all vendors

Frequently asked questions

Common questions about 389ds vulnerabilities.

How many CVEs does 389ds have?: 389ds has 11 published CVE records since 2017, including 3 in the last two years.
How many 389ds CVEs are in CISA KEV?: None of 389ds's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which 389ds products have the most CVEs?: The 389ds products with the most published CVEs are 389-ds-base.
What are the most common weakness types in 389ds CVEs?: 389ds's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-230 (Improper Handling of Missing Values).
Are there public exploits for 389ds vulnerabilities?: Yes — 1 of 389ds's CVEs have a known public exploit.
What is the average severity of 389ds CVEs?: The average CVSS base score across 389ds's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track 389ds vulnerabilities

Monitor new 389ds vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing