Known vulnerabilities in IBM Sterling Control Center - page 7

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_control_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 156
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling Control Center IBM Sterling Control Center is affected by 156 known vulnerabilities: 2 critical, 16 high, 93 medium, 45 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77684 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-4160
CWE-89 Low
No
No
6.1.3.0.14 26.06.2023 SB2023062603
#VU77102 - Stack-based buffer overflow
CVE-2022-45688
CWE-121 Medium
No
No
6.2.1.0.15, 6.3.1.0.4 08.06.2023 SB2023060836
SB2023060927
SB2023071959
and 35 more
#VU75265 - Improper input validation
CVE-2023-21938
CWE-20 Low
No
No
6.1.3.0.18, 6.2.1.0.13, 6.3.0.0.4, 6.3.1.0.2 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
6.1.3.0.16, 6.2.1.0.11, 6.3.0.0.2 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71288 - Improper input validation
CVE-2023-21830
CWE-20 Medium
No
No
6.1.3.0.17, 6.2.1.0.12, 6.3.0.0.3 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843
CWE-20 Low
No
No
6.1.3.0.17, 6.2.1.0.12, 6.3.0.0.3 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165
CWE-444 Medium
No
No
6.1.3.0.14 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68844 - Type confusion
CVE-2022-3676
CWE-843 Medium
No
No
6.1.3.0.15, 6.2.1.0.10, 6.3.0.0.1 31.10.2022 SB2022103129
SB2022111110
SB2022111724
and 60 more
#VU68438 - Improper input validation
CVE-2022-21626
CWE-20 Medium
No
No
6.1.3.0.15, 6.2.1.0.10, 6.3.0.0.1 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
6.2.1.0.9 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
6.1.3.0.14 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980
CWE-94 High
Available
No
6.2.1.0.8 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU63085 - Improper input validation
CVE-2022-22971
CWE-20 Medium
Available
No
6.2.1.0.8 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU62399 - Improper input validation
CVE-2022-21426
CWE-20 Medium
No
No
6.1.3.0.17, 6.2.1.0.12, 6.3.0.0.3 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU60166 - Cryptographic Issues
CVE-2021-4160
CWE-310 Low
No
No
6.1.3.0.14 28.01.2022 SB2022012811
SB2022031611
SB2022042517
and 29 more
#VU58295 - Resource Management Errors
CVE-2021-3733
CWE-399 Low
No
No
6.1.3.0.14 23.11.2021 SB2021112309
SB2021122214
SB2022050235
and 41 more
#VU54852 - Resource exhaustion
CVE-2021-35517
CWE-400 Medium
No
No
- 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU54080 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-31812
CWE-835 Medium
No
No
- 13.06.2021 SB2021061308
SB2021100412
SB2022020119
and 17 more
#VU54079 - Resource exhaustion
CVE-2021-31811
CWE-400 Medium
No
No
- 13.06.2021 SB2021061308
SB2021100412
SB2022081905
and 7 more
#VU52449 - Improper input validation
CVE-2021-2163
CWE-20 Medium
No
No
6.1.3.0.14, 6.2.1.0.9 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more


Showing elements 121 - 140 out of 156