Known vulnerabilities in IBM Sterling Secure Proxy - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_secure_proxy:*:*:*:*:*:*:*:*
Total vulnerabilities: 108
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling Secure Proxy IBM Sterling Secure Proxy is affected by 108 known vulnerabilities: 1 critical, 9 high, 66 medium, 32 low Critical High Medium Low

Vulnerabilities (108)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99762 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29262
CWE-79 Low
No
No
6.0.3.1, 6.1.0.1 05.11.2024 SB2024110546
#VU99761 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-41784
CWE-22 Medium
No
No
6.0.3.1, 6.1.0.1 05.11.2024 SB2024110546
#VU94555 - Improper input validation
CVE-2024-21147
CWE-20 Medium
No
No
6.0.3.1, 6.1.0.1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145
CWE-20 Medium
No
No
6.0.3.1, 6.1.0.1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU89343 - Resource exhaustion
CVE-2023-38264
CWE-400 Medium
No
No
6.0.3.1, 6.1.0.1 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
6.0.3.1, 6.1.0.1 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU88665 - Improper input validation
CVE-2024-21085
CWE-20 Low
No
No
6.0.3.1, 6.1.0.1 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011
CWE-20 Low
No
No
6.0.3.1, 6.1.0.1 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88668 - Improper input validation
CVE-2024-21094
CWE-20 Low
No
No
6.0.3.1, 6.1.0.1 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU87716 - External Control of File Name or Path
CVE-2023-47147
CWE-73 Medium
No
No
6.0.3 iFix 11, 6.1.0 iFix 03 22.03.2024 SB2024032221
#VU87713 - Use of Web Browser Cache Containing Sensitive Information
CVE-2023-46181
CWE-525 Low
No
No
6.0.3 iFix 11, 6.1.0 iFix 03 22.03.2024 SB2024032221
#VU85468 - Improper input validation
CVE-2024-20918
CWE-20 Medium
No
No
6.0.3.1, 6.1.0.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952
CWE-20 Medium
No
No
6.0.3.1, 6.1.0.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919
CWE-20 Medium
No
No
6.0.3.1, 6.1.0.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921
CWE-20 Medium
No
No
6.0.3.1, 6.1.0.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926
CWE-20 Medium
No
No
6.0.3.1, 6.1.0.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945
CWE-20 Low
No
No
6.0.3.1, 6.1.0.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604
CWE-502 Critical
Available
Exploited
6.0.3 iFix 11, 6.1.0 iFix 03 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU82583 - Observable discrepancy
CVE-2023-33850
CWE-203 Medium
No
No
6.0.3.1, 6.1.0.1 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
6.0.3 iFix 11, 6.1.0 iFix 03 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more


Showing elements 41 - 60 out of 108