Known vulnerabilities in IBM Sterling Secure Proxy 6.2.1.1

Version: 6.2.1.1
Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_secure_proxy:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Sterling Secure Proxy version 6.2.1.1 IBM Sterling Secure Proxy 6.2.1.1 is affected by 10 vulnerabilities: 1 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
6.2.1.2.iFix02 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 9 more
#VU125816 - Sensitive Information in Resource Not Removed Before Reuse
CVE-2026-5795
CWE-226 High
No
No
6.2.1.2.iFix02 11.04.2026 SB2026041112
SB20260507308
SB2026052932
and 3 more
#VU125791 - Improper Check or Handling of Exceptional Conditions
CVE-2026-39304
CWE-703 Medium
No
No
6.2.1.2.iFix02 10.04.2026 SB2026041072
SB2026050348
SB2026050349
and 6 more
#VU125786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33227
CWE-22 Low
No
No
6.2.1.2.iFix02 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 5 more
#VU123576 - Improper input validation
CVE-2025-11143
CWE-20 Low
No
No
6.2.1.2.iFix02 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 10 more
#VU121703 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-12383
CWE-362 Medium
No
No
6.2.1.2 20.01.2026 SB2026012071
SB2026012079
SB20260120119
and 17 more
#VU117483 - Improper input validation
CVE-2025-53066
CWE-20 Medium
No
No
6.1.0.3, 6.2.0.3, 6.2.1.2 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057
CWE-20 Medium
No
No
6.1.0.3, 6.2.0.3, 6.2.1.2 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU111165 - Improper Access Control
CVE-2025-48734
CWE-284 Medium
No
No
6.1.0.3, 6.2.0.3, 6.2.1.2 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU111162 - Resource exhaustion
CVE-2025-48976
CWE-400 Medium
Public exploit available
No
6.1.0.3, 6.2.0.3, 6.2.1.2 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more