Known vulnerabilities in IBM Sterling Control Center - page 5

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_control_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 156
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling Control Center IBM Sterling Control Center is affected by 156 known vulnerabilities: 2 critical, 16 high, 93 medium, 45 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933
CWE-264 Low
No
No
6.2.1.0.14, 6.3.1.0.3 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU89709 - Memory corruption
CVE-2024-33602
CWE-119 Medium
No
No
6.3.1.0.3 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU89343 - Resource exhaustion
CVE-2023-38264
CWE-400 Medium
No
No
6.2.1.0.14, 6.3.1.0.3 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88665 - Improper input validation
CVE-2024-21085
CWE-20 Low
No
No
6.2.1.0.14, 6.3.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011
CWE-20 Low
No
No
6.2.1.0.14, 6.3.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88668 - Improper input validation
CVE-2024-21094
CWE-20 Low
No
No
6.2.1.0.14, 6.3.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88669 - Improper input validation
CVE-2024-21012
CWE-20 Low
No
No
6.2.1.0.14, 6.3.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 68 more
#VU83534 - Deserialization of Untrusted Data
CVE-2022-41678
CWE-502 Medium
No
No
6.2.1.0.13 28.11.2023 SB2023112847
SB2023120142
SB2024031265
and 8 more
#VU82143 - Improper input validation
CVE-2023-22025
CWE-20 Low
No
No
6.2.1.0.13, 6.3.1.0.2 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 36 more
#VU78414 - Improper input validation
CVE-2023-22049
CWE-20 Low
No
No
6.2.1.0.13, 6.3.1.0.2 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78415 - Improper input validation
CVE-2023-22036
CWE-20 Low
No
No
6.2.1.0.13, 6.3.1.0.2 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 65 more
#VU78416 - Improper input validation
CVE-2023-22006
CWE-20 Low
No
No
6.2.1.0.13, 6.3.1.0.2 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 67 more
#VU76906 - Out-of-bounds read
CVE-2023-2597
CWE-125 High
No
No
6.2.1.0.13, 6.3.1.0.2 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU75264 - Improper input validation
CVE-2023-21939
CWE-20 Medium
Available
No
6.2.1.0.13, 6.3.1.0.2 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75260 - Improper input validation
CVE-2023-21930
CWE-20 Medium
No
No
6.2.1.0.13, 6.3.1.0.2 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708
CWE-614 Low
No
No
6.2.1.0.14 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU72050 - Improper input validation
CVE-2023-25193
CWE-20 Medium
No
No
6.2.1.0.13, 6.3.1.0.2 08.02.2023 SB2023020843
SB2023041464
SB2023060525
and 80 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252
CWE-444 Medium
No
No
6.2.1.0.14 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU67714 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43980
CWE-200 Low
No
No
6.2.1.0.14 28.09.2022 SB2022092818
SB2022103001
SB2022111642
and 20 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305
CWE-79 Medium
Available
No
6.2.1.0.14 23.06.2022 SB2022062338
SB2022071177
SB2022071801
and 26 more


Showing elements 81 - 100 out of 156