Known vulnerabilities in IBM Sterling Global Mailbox (GM)

Vendor: IBM Corporation
Software: IBM Sterling Global Mailbox (GM)
Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_global_mailbox_gm:*:*:*:*:*:ibm_sterling_b2b_integrator:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 12
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling Global Mailbox (GM) IBM Sterling Global Mailbox (GM) is affected by 12 known vulnerabilities: 1 high, 9 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76636 - Improper Privilege Management
CVE-2023-30601		 CWE-269 Medium
No
No
 6.1.2.3, 6.2.0.0 30.05.2023 SB2023053032
SB2023071706
SB2023091125
and 2 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 6.0.3.8, 6.1.2.2 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363		 CWE-200 Low
No
No
 6.0.3.8, 6.1.2.2 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 6.0.3.8, 6.1.2.2 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 6.0.3.8, 6.1.2.2 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 6.0.3.8, 6.1.2.1 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 6.0.3.8, 6.1.2.1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU60551 - Security Features
CVE-2021-44521		 CWE-254 Low
Available
No
 6.1.2.1 11.02.2022 SB2022021112
SB2022022506
SB2022092339
and 1 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 6.1.0.5, 6.1.1.1 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 - 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 6.0.3.8, 6.1.2.1 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU32971 - Improper input validation
CVE-2020-10663		 CWE-20 Medium
No
No
 6.1.2.1 28.04.2020 SB2020042868
SB2020050208
SB2020081273
and 24 more