Known vulnerabilities in IBM Sterling External Authentication Server 6.1.1.3

Vendor: IBM Corporation
Software: IBM Sterling External Authentication Server
Version: 6.1.1.3
Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_external_authentication_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Sterling External Authentication Server version 6.1.1.3 IBM Sterling External Authentication Server 6.1.1.3 is affected by 30 vulnerabilities: 2 high, 26 medium, 2 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132273 - Incorrect Calculation
CVE-2025-14813		 CWE-682 Medium
No
No
 6.1.1.3 iFix01 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 21 more
#VU132272 - Inconsistency Between Implementation and Documented Design
CVE-2026-8149		 CWE-1068 Medium
No
No
 6.1.1.3 iFix01 25.05.2026 SB2026052535
SB2026081477
SB2026082620
and 1 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636		 CWE-90 Medium
No
No
 6.1.1.3 iFix01 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 16 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588		 CWE-327 Medium
No
No
 6.1.1.3 iFix01 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 18 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 6.1.1.3 iFix01 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 19 more
#VU128402 - Improper Encoding or Escaping of Output
CVE-2026-34480		 CWE-116 Medium
No
No
 6.1.1.3 iFix01 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 21 more
#VU128401 - Improper Encoding or Escaping of Output
CVE-2026-34479		 CWE-116 Medium
No
No
 6.1.1.3 iFix01 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 20 more
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478		 CWE-117 Medium
No
No
 6.1.1.3 iFix01 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 18 more
#VU128399 - Improper Certificate Validation
CVE-2026-34477		 CWE-295 Medium
No
No
 6.1.1.3 iFix01 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 21 more
#VU127603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42033		 CWE-1321 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026061954
SB2026061992
and 12 more
#VU127602 - Allocation of Resources Without Limits or Throttling
CVE-2026-42034		 CWE-770 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 5 more
#VU127593 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42044		 CWE-1321 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424168
SB2026062221
SB2026062508
and 8 more
#VU127592 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42264		 CWE-1321 Medium
No
No
 6.1.1.3 iFix01 24.04.2026 SB20260424168
SB2026061999
SB20260619101
and 10 more
#VU125981 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40895		 CWE-200 Medium
No
No
 6.1.1.3 iFix01 14.04.2026 SB20260414106
SB2026062434
SB20260625284
and 16 more
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332		 CWE-444 Medium
No
No
 6.1.1.3 iFix01 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 13 more
#VU125816 - Sensitive Information in Resource Not Removed Before Reuse
CVE-2026-5795		 CWE-226 High
No
No
 6.1.1.3 iFix01 11.04.2026 SB2026041112
SB20260507308
SB2026052932
and 6 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 6.1.1.3 iFix01 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 31 more
#VU123577 - Missing release of memory after effective lifetime
CVE-2026-1605		 CWE-401 Medium
No
No
 6.1.1.3 iFix01 05.03.2026 SB2026030559
SB2026050522
SB2026061616
and 4 more
#VU123576 - Improper input validation
CVE-2025-11143		 CWE-20 Low
No
No
 6.1.1.3 iFix01 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 13 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 6.1.1.3 iFix01 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more


Showing elements 1 - 20 out of 30