Known vulnerabilities in IBM Sterling Control Center - page 6

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_control_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 197
Public exploits: 12
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling Control Center IBM Sterling Control Center is affected by 197 known vulnerabilities: 2 critical, 19 high, 125 medium, 51 low Critical High Medium Low

Vulnerabilities (197)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933
CWE-264 Low
No
No
6.2.1.0.14, 6.3.1.0.3 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU89709 - Memory corruption
CVE-2024-33602
CWE-119 Medium
No
No
6.3.1.0.3 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU89343 - Resource exhaustion
CVE-2023-38264
CWE-400 Medium
No
No
6.2.1.0.14, 6.3.1.0.3 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88665 - Improper input validation
CVE-2024-21085
CWE-20 Low
No
No
6.2.1.0.14, 6.3.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011
CWE-20 Low
No
No
6.2.1.0.14, 6.3.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88668 - Improper input validation
CVE-2024-21094
CWE-20 Low
No
No
6.2.1.0.14, 6.3.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88669 - Improper input validation
CVE-2024-21012
CWE-20 Low
No
No
6.2.1.0.14, 6.3.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 68 more
#VU83534 - Deserialization of Untrusted Data
CVE-2022-41678
CWE-502 Medium
No
No
6.2.1.0.13 28.11.2023 SB2023112847
SB2023120142
SB2024031265
and 8 more
#VU82143 - Improper input validation
CVE-2023-22025
CWE-20 Low
No
No
6.2.1.0.13, 6.3.1.0.2 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 36 more
#VU78414 - Improper input validation
CVE-2023-22049
CWE-20 Low
No
No
6.2.1.0.13, 6.3.1.0.2 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78415 - Improper input validation
CVE-2023-22036
CWE-20 Low
No
No
6.2.1.0.13, 6.3.1.0.2 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 65 more
#VU78416 - Improper input validation
CVE-2023-22006
CWE-20 Low
No
No
6.2.1.0.13, 6.3.1.0.2 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 67 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708
CWE-614 Low
No
No
6.2.1.0.14 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252
CWE-444 Medium
No
No
6.2.1.0.14 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU67714 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43980
CWE-200 Low
No
No
6.2.1.0.14 28.09.2022 SB2022092818
SB2022103001
SB2022111642
and 20 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305
CWE-79 Medium
Available
No
6.2.1.0.14 23.06.2022 SB2022062338
SB2022071177
SB2022071801
and 26 more
#VU63299 - Error Handling
CVE-2022-25762
CWE-388 Medium
No
No
6.2.1.0.14 17.05.2022 SB2022051715
SB2022071173
SB2022072094
and 14 more
#VU63225 - Data Handling
CVE-2022-29885
CWE-19 Low
Available
No
6.2.1.0.14 16.05.2022 SB2022051612
SB2022072044
SB20220720107
and 19 more
#VU60079 - Permissions, Privileges, and Access Controls
CVE-2022-23181
CWE-264 Low
No
No
6.2.1.0.14 27.01.2022 SB2022012708
SB2022030854
SB2022041951
and 25 more
#VU57389 - Resource exhaustion
CVE-2021-42340
CWE-400 Medium
No
No
6.2.1.0.14 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more


Showing elements 101 - 120 out of 197