Control Center (Ibm) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2025-04-10. Vendor: Ibm.
CVEs of Control Center
- CVE-2023-43035 - CVSS 4 (medium), 2025-04-10: IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2023-42007 - CVSS 5.4 (medium), 2025-04-10: IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
- CVE-2023-43052 - CVSS 5.3 (medium), 2025-03-07: IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote…
- CVE-2023-35894 - CVSS 6.1 (medium), 2025-03-07: IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an…
- CVE-2024-35114 - CVSS 5.3 (medium), 2025-01-25: IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts.
- CVE-2024-35113 - CVSS 6.5 (medium), 2025-01-25: IBM Control Center 6.2.1 and 6.3.1 could allow an authenticated user to obtain sensitive information exposed through a directory listing.
- CVE-2024-35112 - CVSS 5.4 (medium), 2025-01-25: IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
- CVE-2024-35111 - CVSS 4.3 (medium), 2025-01-25: IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
- CVE-2021-20529 - CVSS 5.3 (medium), 2021-05-19: IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force…
- CVE-2021-20528 - CVSS 5.4 (medium), 2021-05-19: IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
- CVE-2017-1758 - CVSS 7.1 (high), 2018-02-21: IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4,…
- CVE-2016-0252 - CVSS 5.1 (medium), 2016-07-08: IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via…
