Known vulnerabilities in IBM Sterling Control Center - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_control_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 156
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling Control Center IBM Sterling Control Center is affected by 156 known vulnerabilities: 2 critical, 16 high, 93 medium, 45 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112132 - Stack-based buffer overflow
CVE-2025-4447
CWE-121 Medium
No
No
6.3.1.0.5, 6.4.0.0.2 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU111165 - Improper Access Control
CVE-2025-48734
CWE-284 Medium
No
No
6.4.0.0.2 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU107966 - Missing Authorization
CVE-2025-22235
CWE-862 Medium
No
No
6.3.1.0.4, 6.4.0.0.2 25.04.2025 SB2025042526
SB2025060429
SB2025060529
and 15 more
#VU107912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-35112
CWE-79 Low
No
No
6.2.1.0.14, 6.3.1.0.2 24.04.2025 SB2025042450
#VU107909 - Information Exposure Through an Error Message
CVE-2024-35111
CWE-209 Low
No
No
6.2.1.0.4, 6.3.1.0.2 24.04.2025 SB2025042447
#VU107888 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2024-35113
CWE-497 Low
No
No
6.2.1.0.14, 6.3.1.0.2 23.04.2025 SB2025042355
#VU107871 - Observable Response Discrepancy
CVE-2024-35114
CWE-204 Medium
No
No
6.2.1.0.14, 6.3.1.0.2 23.04.2025 SB2025042326
#VU107404 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42007
CWE-79 Low
No
No
6.2.1.0.15, 6.3.1.0.4, 6.4.0.0.1 14.04.2025 SB2025041407
#VU107402 - Use of Web Browser Cache Containing Sensitive Information
CVE-2023-43035
CWE-525 Low
No
No
6.2.1.0.15, 6.3.1.0.4, 6.4.0.0.1 14.04.2025 SB2025041406
#VU105881 - Security Features
CVE-2025-22228
CWE-254 Low
No
No
6.3.1.0.4, 6.4.0.0.2 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU99267 - Improper Authorization
CVE-2024-38821
CWE-285 Medium
Available
No
6.3.1.0.4, 6.4.0.0.2 23.10.2024 SB2024102307
SB2024112849
SB2024112910
and 13 more
#VU98517 - Resource exhaustion
CVE-2024-8184
CWE-400 Medium
No
No
6.3.1.0.4, 6.4.0.0.1 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763
CWE-918 Medium
No
No
6.3.1.0.4, 6.4.0.0.1 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
6.2.1.0.15 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81726 - Integer overflow
CVE-2023-36478
CWE-190 Medium
No
No
6.2.1.0.15 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80793 - Improper Authorization
CVE-2023-41900
CWE-285 Low
No
No
6.2.1.0.15 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
6.2.1.0.15 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
6.2.1.0.15 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU78394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28439
CWE-79 Low
No
No
6.2.1.0.15 19.07.2023 SB2023071950
SB2023071977
SB20230719111
and 13 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
6.2.1.0.15 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more


Showing elements 41 - 60 out of 156