Known vulnerabilities in Sterling Connect Direct File Agent

Known vulnerabilities in Sterling Connect Direct File Agent

Vendor: IBM Corporation

Software: Sterling Connect Direct File Agent

Software CPE: cpe:2.3:a:ibm_corporation:sterling_connect_direct_file_agent:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 8

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68832 - Resource exhaustion CVE-2022-42004	CWE-400	Medium	No	No	1.4.0.2 iFix030	31.10.2022	SB2022103116 SB2022103117 SB2022111404 and 122 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	1.4.0.2 iFix030	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU64957 - Improper Control of Generation of Code ('Code Injection') CVE-2022-33980	CWE-94	High	Available	No	1.4.0.2.027	06.07.2022	SB2022070645 SB2022072604 SB2022081517 and 31 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Available	Exploited	-	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 178 more
#VU57496 - Improper input validation CVE-2021-35603	CWE-20	Low	No	No	1.4.0.2_iFix026	19.10.2021	SB2021101939 SB2021101940 SB2021102101 and 112 more
#VU26146 - Improper Control of Generation of Code ('Code Injection') CVE-2020-1953	CWE-94	Medium	No	No	1.4.0.2.8	17.03.2020	SB2020031715 SB2020102941 SB2022090817 and 3 more
#VU11268 - Deserialization of Untrusted Data CVE-2018-7489	CWE-502	High	No	No	1.4.0.2.8	26.03.2018	SB2018021604 SB2018041910 SB2018050306 and 27 more