SC
Product
Sterling Control Center
12
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 10Low 1
Watch
Add Sterling Control Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-35113 | 6.5 | Jan 25 | IBM Control Center information disclosure Affected: 6.2.1, 6.3.1 |
| CVE-2023-35894 | 6.1 | Mar 7 | IBM Control Center HOST header injection Affected: 6.2.1 through 6.3.1 |
| CVE-2023-42007 | 5.4 | Apr 10 | IBM Sterling Control Center cross-site scripting Affected: 6.2.1; 6.3.1; 6.4.0 |
| CVE-2021-20528 | 5.4 | May 19 | IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.2.0.0 |
| CVE-2023-43052 | 5.3 | Mar 7 | IBM Control Center external service interaction Affected: 6.2.1 through 6.3.1 |
| CVE-2024-35114 | 5.3 | Jan 25 | IBM Control Center information disclosure Affected: 6.2.1, 6.3.1 |
| CVE-2021-20529 | 5.3 | May 19 | IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system Affected: 6.2.0.0 |
| CVE-2016-0252 | 5.1 | Jul 8 | IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors Affected: 6.0.0.0 |
| CVE-2024-35112 | 4.3 | Jan 25 | IBM Control Center cross-site scripting Affected: 6.2.1, 6.3.1 |
| CVE-2024-35111 | 4.3 | Jan 25 | IBM Control Center information disclosure Affected: 6.2.1, 6.3.1 |
Showing 10