Known vulnerabilities in IBM Sterling Control Center 6.3.1.0.11

Version: 6.3.1.0.11
Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_control_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Sterling Control Center version 6.3.1.0.11 IBM Sterling Control Center 6.3.1.0.11 is affected by 18 vulnerabilities: 1 high, 12 medium, 5 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150800 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-19203
CWE-444 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 18.09.2026 SB2026091662
SB2026100519
SB20261007209
and 4 more
#VU150237 - Resource exhaustion
CVE-2026-12611
CWE-400 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 16.09.2026 SB2026091662
SB2026100520
#VU150236 - Uncontrolled Memory Allocation
CVE-2026-19204
CWE-789 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 16.09.2026 SB2026091662
SB2026100524
#VU148861 - Improper input validation
CVE-2026-74761
CWE-20 Low
No
No
6.3.1.0.12, 6.4.2.0.8 10.09.2026 SB2026091003
SB20260925208
SB20260925209
and 4 more
#VU147210 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-78254
CWE-22 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 07.09.2026 SB2026090711
SB2026100518
SB2026101330
and 1 more
#VU146400 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-59313
CWE-93 Low
No
No
6.3.1.0.12, 6.4.2.0.8 31.08.2026 SB20260828166
SB2026090929
SB2026100609
#VU146382 - Improper Control of Dynamically-Managed Code Resources
CVE-2026-59283
CWE-913 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 31.08.2026 SB20260828166
SB2026090929
SB2026100612
and 1 more
#VU146239 - Improper Authentication
CVE-2026-47841
CWE-287 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828170
SB2026090929
SB2026100618
#VU146230 - Allocation of Resources Without Limits or Throttling
CVE-2026-59282
CWE-770 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100611
and 1 more
#VU146227 - Sensitive Cookie with Improper SameSite Attribute
CVE-2026-47889
CWE-1275 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100607
#VU146225 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-47890
CWE-93 Low
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100610
#VU146224 - Allocation of Resources Without Limits or Throttling
CVE-2026-47891
CWE-770 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100607
#VU146222 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-47883
CWE-601 Low
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100607
#VU146221 - Allocation of Resources Without Limits or Throttling
CVE-2026-47885
CWE-770 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100607
#VU146219 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-47887
CWE-601 Low
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100610
#VU146218 - Resource exhaustion
CVE-2026-47886
CWE-400 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100608
and 1 more
#VU146217 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-47884
CWE-22 High
No
No
6.3.1.0.12, 6.4.2.0.8 28.08.2026 SB20260828166
SB2026090929
SB2026100610
#VU144594 - Resource exhaustion
CVE-2026-68497
CWE-400 Medium
No
No
6.3.1.0.12, 6.4.2.0.8 24.08.2026 SB2026082435
SB2026092909
SB2026092956
and 3 more