Sterling Connectexpress For Unix (Ibm) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2024-03-04. Vendor: Ibm.

CVEs of Sterling Connectexpress For Unix

• CVE-2023-32331 - CVSS 7.5 (high), 2024-03-04: IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI.…
• CVE-2023-29259 - CVSS 5.3 (medium), 2023-07-19: IBM Sterling Connect:Express for UNIX 1.5 browser UI is vulnerable to attacks that rely on the use of cookies without the SameSite attribute. IBM X-Force ID:…
• CVE-2023-26023 - CVSS 7.5 (high), 2023-07-19: Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to…
• CVE-2021-38933 - CVSS 7.5 (high), 2023-07-19: IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
• CVE-2023-29260 - CVSS 6.5 (medium), 2023-07-19: IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized…