SC
Product
Sterling Control Center
8
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 1
Watch
Add Sterling Control Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-35894 | 6.1 | Mar 7 | IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers Affected: 6.2.1; 6.3.1 |
| CVE-2023-42007 | 5.4 | Apr 10 | IBM Sterling Control Center cross-site scripting Affected: 6.2.1; 6.3.1; 6.4.0 |
| CVE-2023-35020 | 5.3 | Jan 19 | IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system Affected: 6.3.0 |
| CVE-2016-0252 | 5.1 | Jul 8 | IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors Affected: 5.4.0.0; 5.4.0.1; 5.4.1; 5.4.1.0; 5.4.2; 5.4.2.0 |
| CVE-2023-43035 | 3.3 | Apr 10 | IBM Sterling Control Center information disclosure Affected: 6.2.1; 6.3.1; 6.4.0 |
| CVE-2014-0925 | – | May 30 | Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to… Affected: 5.4.0; 5.4.0.1; 5.4.1.0 |
| CVE-2013-2969 | – | Jun 19 | Cross-site scripting (XSS) vulnerability in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to… Affected: 5.2.0; 5.3.0; 5.3.0.1; 5.3.0.2; 5.3.0.3; 5.4.0; +1 more |
| CVE-2013-2968 | – | Jun 19 | An unspecified buffer-read method in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to cause a… Affected: 5.2.0; 5.3.0; 5.3.0.1; 5.3.0.2; 5.3.0.3; 5.4.0; +1 more |
Showing 8