Known vulnerabilities in IBM Sterling Secure Proxy - page 4
Vendor:
IBM Corporation
Software:
IBM Sterling Secure Proxy
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_sterling_secure_proxy:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
108
Public exploits:
7
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
6.1.0.4
6.2.1.2.iFix02
6.2.1.2
6.1.0.0
6.2.1.0
6.2.0.2
6.1.0.2
6.1.0.3
6.2.0.3
6.2.1.1
6.2.0.1
6.2.0.0
6.2.0.1 iFix 02
6.1.0.1 iFix 03
6.0.3.1 iFix 03
6.2.0.1 iFix 01
6.1.0.1 iFix 02
6.2.0.0 ifix 01
6.1.0.1
6.0.3.1
6.1.0 iFix 03
6.0.3 iFix 11
6.0.3 iFix 06
6.0.3 iFix 08
6.0.3 iFix 05
6.0.3 iFix 07
6.0.3
6.0.2
3.4.3.2
Vulnerabilities (108)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU87720 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-46182 |
CWE-79 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 22.03.2024 |
SB2024032221 |
||
| #VU87719 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-47162 |
CWE-79 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 22.03.2024 |
SB2024032221 |
||
| #VU87718 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2023-46179 |
CWE-614 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 22.03.2024 |
SB2024032221 |
||
| #VU87714 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-47699 |
CWE-79 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 22.03.2024 |
SB2024032221 |
||
| #VU83534 - Deserialization of Untrusted Data CVE-2022-41678 |
CWE-502 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 28.11.2023 |
SB2023112847 SB2023120142 SB2024031265 and 8 more |
||
| #VU83267 - Improper input validation CVE-2023-5676 |
CWE-20 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 20.11.2023 |
SB2023112010 SB2023112011 SB2023112726 and 101 more |
||
| #VU82650 - Resource exhaustion CVE-2023-45177 |
CWE-400 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 01.11.2023 |
SB2023110121 SB2023110306 SB2023110307 and 2 more |
||
| #VU82140 - Improper input validation CVE-2023-22067 |
CWE-20 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 17.10.2023 |
SB2023101797 SB2023101924 SB2023101990 and 117 more |
||
| #VU82141 - Improper input validation CVE-2023-22081 |
CWE-20 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 17.10.2023 |
SB2023101797 SB2023101798 SB2023101905 and 187 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 6.0.3 iFix 11, 6.1.0 iFix 03 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 648 more |
||
| #VU81726 - Integer overflow CVE-2023-36478 |
CWE-190 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 10.10.2023 |
SB2023101018 SB2023102640 SB2023103106 and 53 more |
||
| #VU80793 - Improper Authorization CVE-2023-41900 |
CWE-285 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 29 more |
||
| #VU80792 - Improper input validation CVE-2023-36479 |
CWE-20 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 48 more |
||
| #VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167 |
CWE-444 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023101760 and 68 more |
||
| #VU80732 - Resource exhaustion CVE-2023-38039 |
CWE-400 | Medium | 6.0.3 iFix 11, 6.1.0 iFix 03 | 13.09.2023 |
SB2023091327 SB2023091363 SB2023091402 and 33 more |
||
| #VU78413 - Improper input validation CVE-2023-22045 |
CWE-20 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 19.07.2023 |
SB2023071985 SB2023071986 SB2023071987 and 155 more |
||
| #VU78414 - Improper input validation CVE-2023-22049 |
CWE-20 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 19.07.2023 |
SB2023071985 SB2023071986 SB2023071987 and 164 more |
||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 08.06.2023 |
SB2023060849 SB2023071712 SB2023072512 and 157 more |
||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | 6.0.3 iFix 11, 6.1.0 iFix 03 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 137 more |
||
| #VU11301 - Improper Access Control CVE-2018-8088 |
CWE-284 | Low | 6.0.3 iFix 11, 6.1.0 iFix 03 | 28.03.2018 |
SB2018022112 SB2018032813 SB2018032817 and 27 more |
Showing elements 61 - 80 out of 108