Known vulnerabilities in IBM Sterling External Authentication Server

Vendor: IBM Corporation
Software: IBM Sterling External Authentication Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_external_authentication_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 78
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling External Authentication Server IBM Sterling External Authentication Server is affected by 78 known vulnerabilities: 6 high, 62 medium, 10 low Critical High Medium Low

Vulnerabilities (78)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132273 - Incorrect Calculation
CVE-2025-14813		 CWE-682 Medium
No
No
 6.1.1.3 iFix01 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 23 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 6.1.1.3 iFix01 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 20 more
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175		 CWE-113 Medium
No
No
 6.1.1.3 iFix01 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 23 more
#VU127606 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42035		 CWE-113 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026061912
SB2026061913
and 18 more
#VU127603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42033		 CWE-1321 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026061954
SB2026061992
and 14 more
#VU127602 - Allocation of Resources Without Limits or Throttling
CVE-2026-42034		 CWE-770 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 7 more
#VU127601 - Allocation of Resources Without Limits or Throttling
CVE-2026-42036		 CWE-770 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 7 more
#VU127600 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-42037		 CWE-93 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 7 more
#VU127599 - Improper Access Control
CVE-2026-42038		 CWE-284 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026061992
SB2026061993
and 11 more
#VU127598 - Uncontrolled Recursion
CVE-2026-42039		 CWE-674 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026061954
SB2026062221
and 8 more
#VU127597 - Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42040		 CWE-626 Low
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 7 more
#VU127596 - Permissive List of Allowed Inputs
CVE-2026-42042		 CWE-183 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 7 more
#VU127595 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42041		 CWE-1321 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026061954
SB2026062221
and 11 more
#VU127594 - Permissive List of Allowed Inputs
CVE-2026-42043		 CWE-183 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026061954
SB2026061999
and 12 more
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 6.1.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 82 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 6.1.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 84 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 6.1.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU126764 - Improper input validation
CVE-2026-22018		 CWE-20 Low
No
No
 6.1.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU126765 - Improper input validation
CVE-2026-22007		 CWE-20 Low
No
No
 6.1.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 6.1.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more


Showing elements 1 - 20 out of 78