Known vulnerabilities in IBM Sterling Secure Proxy - page 5

Vendor: IBM Corporation
Software: IBM Sterling Secure Proxy
Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_secure_proxy:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 108
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling Secure Proxy IBM Sterling Secure Proxy is affected by 108 known vulnerabilities: 1 critical, 9 high, 66 medium, 32 low Critical High Medium Low

Vulnerabilities (108)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83423 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34362		 CWE-79 Low
No
No
 6.0.3 iFix 06 22.11.2023 SB2023112222
#VU82004 - Improper input validation
CVE-2022-31772		 CWE-20 Medium
No
No
 6.0.3 iFix 06 13.10.2023 SB2023101327
SB2023112222
SB2025011422
#VU81037 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-35720		 CWE-327 Low
No
No
 6.0.3 iFix 06 21.09.2023 SB2023092128
SB2023112222
#VU80326 - Cleartext Storage of Sensitive Information
CVE-2023-32338		 CWE-312 Low
No
No
 6.0.3 iFix 08 04.09.2023 SB2023090415
SB2023090416
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 6.0.3 iFix 08 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77329 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-34361		 CWE-327 Medium
No
No
 6.0.3 iFix 05 15.06.2023 SB2023061504
#VU75594 - Improper input validation
CVE-2023-22874		 CWE-20 Low
No
No
 6.0.3 iFix 08 28.04.2023 SB2023042851
SB2023060212
SB2023090415
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 6.0.3 iFix 08 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 6.0.3 iFix 08 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75218 - Resource exhaustion
CVE-2023-26048		 CWE-400 Medium
No
No
 6.0.3 iFix 08 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 6.0.3 iFix 08 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 6.0.3 iFix 08 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71109 - Out-of-bounds write
CVE-2022-45693		 CWE-787 Medium
No
No
 6.0.3 iFix 08 11.01.2023 SB2023011159
SB2023011160
SB2023013112
and 45 more
#VU71108 - Out-of-bounds write
CVE-2022-45685		 CWE-787 Medium
No
No
 6.0.3 iFix 08 11.01.2023 SB2023011159
SB2023011160
SB2023030328
and 29 more
#VU69674 - Resource exhaustion
CVE-2022-40150		 CWE-400 Medium
No
No
 6.0.3 iFix 08 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 46 more
#VU69673 - Out-of-bounds write
CVE-2022-40149		 CWE-787 Medium
No
No
 6.0.3 iFix 08 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 41 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 6.0.3 iFix 07 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 6.0.3 iFix 08 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 6.0.3 iFix 06 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU52449 - Improper input validation
CVE-2021-2163		 CWE-20 Medium
No
No
 6.0.3 iFix 05 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more


Showing elements 81 - 100 out of 108