Known vulnerabilities in IBM Sterling Connect:Direct Web Services

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_connect_direct_web_services:*:*:*:*:*:*:*:*
Total vulnerabilities: 192
Public exploits: 7
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling Connect:Direct Web Services IBM Sterling Connect:Direct Web Services is affected by 192 known vulnerabilities: 2 critical, 22 high, 115 medium, 53 low Critical High Medium Low

Vulnerabilities (192)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512
CWE-502 High
No
No
6.3.0.20, 6.4.0.9 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 24 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513
CWE-184 High
No
No
6.3.0.20, 6.4.0.9 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 26 more
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514
CWE-918 Medium
No
No
6.3.0.20, 6.4.0.9 22.07.2026 SB2026072278
SB2026072288
SB2026072340
and 10 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515
CWE-915 Medium
No
No
6.3.0.20, 6.4.0.9 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 12 more
#VU139155 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54516
CWE-915 Medium
No
No
6.3.0.20, 6.4.0.9 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 7 more
#VU139154 - Incorrect Authorization
CVE-2026-54517
CWE-863 Medium
No
No
6.3.0.20, 6.4.0.9 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 7 more
#VU139153 - Incorrect Authorization
CVE-2026-54518
CWE-863 Medium
No
No
6.3.0.20, 6.4.0.9 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 7 more
#VU133457 - Incorrect Comparison
CVE-2026-44249
CWE-697 High
No
No
6.3.0.20, 6.4.0.9 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 11 more
#VU133452 - Improper Certificate Validation
CVE-2026-50010
CWE-295 Medium
No
No
6.3.0.20, 6.4.0.9 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 11 more
#VU133451 - Generation of Predictable Numbers or Identifiers
CVE-2026-45673
CWE-340 Medium
No
No
6.3.0.20, 6.4.0.9 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 4 more
#VU133450 - Uncontrolled Memory Allocation
CVE-2026-45416
CWE-789 Medium
No
No
6.3.0.20, 6.4.0.9 08.06.2026 SB2026060813
SB20260626101
SB2026070110
and 13 more
#VU133448 - Insufficient Verification of Data Authenticity
CVE-2026-45674
CWE-345 High
No
No
6.3.0.20, 6.4.0.9 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 6 more
#VU133444 - Insufficient Verification of Data Authenticity
CVE-2026-47691
CWE-345 High
No
No
6.3.0.20, 6.4.0.9 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 6 more
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
6.3.0.19, 6.4.0.8 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 18 more
#VU132259 - Covert Timing Channel
CVE-2026-5598
CWE-385 Medium
No
No
6.3.0.19, 6.4.0.8 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 16 more
#VU128233 - Improper Validation of Certificate with Host Mismatch
CVE-2026-40974
CWE-297 Medium
No
No
6.3.0.19, 6.4.0.8 27.04.2026 SB20260427182
SB2026052513
SB20260528266
and 3 more
#VU128230 - Improper Validation of Certificate with Host Mismatch
CVE-2026-40971
CWE-297 Medium
No
No
6.3.0.19, 6.4.0.8 27.04.2026 SB20260427182
SB2026060827
SB2026062914
#VU128224 - Observable discrepancy
CVE-2026-22746
CWE-203 Low
No
No
6.3.0.19, 6.4.0.8 27.04.2026 SB20260427181
SB2026052513
SB2026060828
and 1 more
#VU128222 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-22751
CWE-367 Medium
No
No
6.3.0.19, 6.4.0.8 27.04.2026 SB20260427181
SB2026052513
SB2026060828
and 1 more
#VU126710 - Resource exhaustion
CVE-2026-22745
CWE-400 Medium
No
No
6.3.0.19, 6.4.0.8 21.04.2026 SB2026042162
SB2026052514
SB2026060904
and 2 more


Showing elements 1 - 20 out of 192