Sterling Control Center (Ibm) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2025-04-10. Vendor: Ibm.
CVEs of Sterling Control Center
- CVE-2023-42007 - CVSS 5.4 (medium), 2025-04-10: IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
- CVE-2023-43035 - CVSS 4 (medium), 2025-04-10: IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2023-35894 - CVSS 6.1 (medium), 2025-03-07: IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an…
- CVE-2023-35020 - CVSS 5.4 (medium), 2024-01-19: IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request…
- CVE-2016-0252 - CVSS 5.1 (medium), 2016-07-08: IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via…
- CVE-2014-0925 - CVSS 3.5 (low), 2014-05-30: Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to…
- CVE-2013-2969 - CVSS 3.5 (low), 2013-06-19: Cross-site scripting (XSS) vulnerability in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote…
- CVE-2013-2968 - CVSS 6.3 (medium), 2013-06-19: An unspecified buffer-read method in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote…
