Login Request a demo
LE
Product
lemonldap-ng
by lemonldap-ng · last CVE Jun 21, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 8High 5Medium 4Low 0
Severity
All severities18Critical8High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lemonldap-ng to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19791
9.8
1%
May 29
In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/REST endpoints (when some LemonLDAP::NG…
Affected: before 2.0.7
CVE-2023-28862
9.8
1%
Mar 31
An issue was discovered in LemonLDAP::NG before 2.16.1
Affected: before 2.16.1
CVE-2021-40874
9.8
1%
Jul 17
An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13
Affected: 2.0.13
CVE-2020-24660
9.8
2%
Sep 14
An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used
Affected: through 2.0.8
CVE-2019-15941
9.8
2%
Sep 25
OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request
Affected: 2.0.0 through 2.0.5
CVE-2019-12046
9.8
3%
May 22
LemonLDAP::NG -2.0.3 has Incorrect Access Control
Affected: 2.0.3
CVE-2021-35473
9.1
0%
Nov 10
An issue was discovered in LemonLDAP::NG before 2.0.12
Affected: before 2.0.12
CVE-2024-45160
9.1
1%
Oct 9
Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via an empty client_password parameter…
Affected: 2.18.0 before 2.19.2
Showing 8