SC
Product
Sterling Connect Direct for Unix
11
CVEs
0
On KEV
8.4
Max CVSS
2
New 30D
Severity mix
Critical 0High 7Medium 2Low 2
Watch
Add Sterling Connect Direct for Unix to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105453 | 8.4 | Oct 19 | IBM Sterling Connect:Direct for Unix Improper Privilege Management Affected: 6.3.0.0 through 6.3.0.7; 6.4.0.0 through 6.4.0.6 |
| CVE-2026-93888 | 7.8 | Oct 20 | IBM Sterling Connect:Direct for Unix Buffer Overflow Affected: 6.4.0.0 through 6.4.0.6; 6.3.0.0 through 6.3.0.7 |
| CVE-2020-4587 | 7.8 | Aug 24 | IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking Affected: 4.2.0; 4.3.0 |
| CVE-2021-38891 | 7.5 | Nov 23 | IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 6.0.0 before 6.2.0.1 |
| CVE-2021-38890 | 7.5 | Nov 23 | IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials Affected: 6.0.0 before 6.2.0.1 |
| CVE-2020-4767 | 7.5 | Oct 28 | IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read Affected: 4.7.0.0 before 4.7.0.7; 4.8.0.0 before 4.8.0.3; 6.0.0.0 before 6.0.0.4; 6.1.0.0 before 6.1.0.1 |
| CVE-2025-36137 | 7.2 | Oct 30 | IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for… Affected: 6.2.0.7 before 6.2.0.9; 6.3.0.2 before 6.3.0.5; 6.4.0.0 before 6.4.0.2; 6.2.0.9; 6.2.0.9; 6.3.0.5; +3 more |
| CVE-2018-1903 | 6.7 | Apr 10 | IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access Affected: 4.2.0; 4.3.0; 6.0.0 |
| CVE-2016-5991 | 4.5 | Nov 25 | IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to gain privileges via unspecified vectors Affected: 4.5; 4.5.01; 4.6; 4.7 |
| CVE-2016-0380 | 3.3 | Aug 8 | IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain… Affected: 4.1.0.0; 4.1.0.1; 4.1.0.2; 4.1.0.3; 4.1.0.4; 4.2.0.0; +4 more |
| CVE-2016-5992 | 2.5 | Nov 25 | IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to cause a denial of service via unspecified… Affected: 4.5; 4.5.01; 4.6; 4.7 |
Showing 11