Sterling Connect\ (Ibm) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 75 known versions, newest CVE from 2026-01-20. Vendor: Ibm.

CVEs of Sterling Connect\

CVE-2025-36066 - CVSS 6.1 (medium), 2026-01-20: IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability…
CVE-2025-36065 - CVSS 6.5 (medium), 2026-01-20: IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which…
CVE-2025-36115 - CVSS 6.5 (medium), 2026-01-20: IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an…
CVE-2025-36063 - CVSS 6.5 (medium), 2026-01-20: IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a logout which could allow…
CVE-2025-36113 - CVSS 5.4 (medium), 2026-01-20: IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability…
CVE-2025-36137 - CVSS 7.2 (high), 2025-10-30: IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns…
CVE-2025-36064 - CVSS 5.9 (medium), 2025-09-22: IBM Sterling Connect:Express for Microsoft Windows 3.1.0.0 through 3.1.0.22 uses an inadequate account lockout setting that could allow a remote attacker to…
CVE-2024-39744 - CVSS 4.3 (medium), 2024-08-22: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious…
CVE-2024-39746 - CVSS 5.9 (medium), 2024-08-22: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the failure to…
CVE-2024-39745 - CVSS 7.5 (high), 2024-08-22: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
CVE-2023-32331 - CVSS 7.5 (high), 2024-03-04: IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI.…
CVE-2023-29259 - CVSS 5.3 (medium), 2023-07-19: IBM Sterling Connect:Express for UNIX 1.5 browser UI is vulnerable to attacks that rely on the use of cookies without the SameSite attribute. IBM X-Force ID:…
CVE-2021-38933 - CVSS 7.5 (high), 2023-07-19: IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2023-29260 - CVSS 6.5 (medium), 2023-07-19: IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized…
CVE-2021-38890 - CVSS 7.5 (high), 2021-11-23: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account…
CVE-2021-38891 - CVSS 7.5 (high), 2021-11-23: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2020-4767 - CVSS 7.5 (high), 2020-10-28: IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer…
CVE-2020-4587 - CVSS 8.4 (high), 2020-08-24: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A…
CVE-2018-1903 - CVSS 6.7 (medium), 2019-04-10: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full…
CVE-2016-5992 - CVSS 2.5 (low), 2016-11-25: IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to cause a denial of service…
CVE-2016-5991 - CVSS 4.5 (medium), 2016-11-25: IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to gain privileges via…
CVE-2016-0380 - CVSS 3.3 (low), 2016-08-08: IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local…