Known vulnerabilities in Sterling Connect:Direct Browser User Interface
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:sterling_connect_direct_browser_user_interface:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
47
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (47)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU83267 - Improper input validation CVE-2023-5676 |
CWE-20 | Low | 1.5.0.2 iFix-40 | 20.11.2023 |
SB2023112010 SB2023112011 SB2023112726 and 101 more |
||
| #VU82140 - Improper input validation CVE-2023-22067 |
CWE-20 | Medium | 1.5.0.2 iFix-40 | 17.10.2023 |
SB2023101797 SB2023101924 SB2023101990 and 117 more |
||
| #VU82141 - Improper input validation CVE-2023-22081 |
CWE-20 | Medium | 1.5.0.2 iFix-40 | 17.10.2023 |
SB2023101797 SB2023101798 SB2023101905 and 187 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 1.5.0.2 iFix-39 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 648 more |
||
| #VU81726 - Integer overflow CVE-2023-36478 |
CWE-190 | Medium | 1.5.0.2 iFix-39 | 10.10.2023 |
SB2023101018 SB2023102640 SB2023103106 and 53 more |
||
| #VU80793 - Improper Authorization CVE-2023-41900 |
CWE-285 | Low | 1.5.0.2 iFix-39 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 29 more |
||
| #VU80792 - Improper input validation CVE-2023-36479 |
CWE-20 | Medium | 1.5.0.2 iFix-39 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 48 more |
||
| #VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167 |
CWE-444 | Medium | 1.5.0.2 iFix-39 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023101760 and 68 more |
||
| #VU78901 - Deserialization of Untrusted Data CVE-2022-40609 |
CWE-502 | High | 1.5.0.2 iFix-38 | 03.08.2023 |
SB2023080307 SB2023080808 SB2023080809 and 56 more |
||
| #VU78413 - Improper input validation CVE-2023-22045 |
CWE-20 | Low | 1.5.0.2 iFix-40 | 19.07.2023 |
SB2023071985 SB2023071986 SB2023071987 and 155 more |
||
| #VU78414 - Improper input validation CVE-2023-22049 |
CWE-20 | Low | 1.5.0.2 iFix-40 | 19.07.2023 |
SB2023071985 SB2023071986 SB2023071987 and 164 more |
||
| #VU75264 - Improper input validation CVE-2023-21939 |
CWE-20 | Medium | 1.5.0.2 iFix-36 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75265 - Improper input validation CVE-2023-21938 |
CWE-20 | Low | 1.5.0.2 iFix-36 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 181 more |
||
| #VU75266 - Improper input validation CVE-2023-21968 |
CWE-20 | Low | 1.5.0.2 iFix-36 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75267 - Improper input validation CVE-2023-21937 |
CWE-20 | Low | 1.5.0.2 iFix-36 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 184 more |
||
| #VU75260 - Improper input validation CVE-2023-21930 |
CWE-20 | Medium | 1.5.0.2 iFix-36 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 191 more |
||
| #VU75261 - Improper input validation CVE-2023-21967 |
CWE-20 | Medium | 1.5.0.2 iFix-36 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 189 more |
||
| #VU75262 - Improper input validation CVE-2023-21954 |
CWE-20 | Medium | 1.5.0.2 iFix-36 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 166 more |
||
| #VU75218 - Resource exhaustion CVE-2023-26048 |
CWE-400 | Medium | 1.5.0.2 iFix-37 | 18.04.2023 |
SB2023041842 SB2023051753 SB2023060701 and 55 more |
||
| #VU75217 - Improper input validation CVE-2023-26049 |
CWE-20 | Low | 1.5.0.2 iFix-37 | 18.04.2023 |
SB2023041842 SB2023051821 SB2023060836 and 78 more |
Showing elements 1 - 20 out of 47