Sterling Secure Proxy (Ibm) - vulnerabilities (CVEs)

33 CVEs, 0 in the last 30 days, 48 known versions, newest CVE from 2026-09-14. Vendor: Ibm.

CVEs of Sterling Secure Proxy

CVE-2026-75792 - CVSS 4.3 (medium), 2026-09-14: IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to…
CVE-2026-78415 - CVSS 5.4 (medium), 2026-09-14: IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper…
CVE-2024-51453 - CVSS 7.5 (high), 2025-05-28: IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially…
CVE-2024-38341 - CVSS 7.5 (high), 2025-05-28: IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms…
CVE-2024-41783 - CVSS 9.1 (critical), 2025-01-19: IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying…
CVE-2024-38337 - CVSS 9.1 (critical), 2025-01-19: IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive…
CVE-2024-41784 - CVSS 7.5 (high), 2024-11-15: IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker…
CVE-2023-47147 - CVSS 5.9 (medium), 2024-03-15: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow an attacker to overwrite a log message under specific conditions. IBM X-Force ID: 270598.
CVE-2023-47699 - CVSS 6.1 (medium), 2024-03-15: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2023-46181 - CVSS 4 (medium), 2024-03-15: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 269686.
CVE-2023-46182 - CVSS 5.4 (medium), 2024-03-15: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2023-46179 - CVSS 4.3 (medium), 2024-03-15: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the…
CVE-2023-47162 - CVSS 6.1 (medium), 2024-03-15: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2023-29261 - CVSS 5.5 (medium), 2023-09-05: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged information due to…
CVE-2023-32338 - CVSS 5.5 (medium), 2023-09-05: IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a…
CVE-2022-35720 - CVSS 5.5 (medium), 2023-02-08: IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation…
CVE-2022-34362 - CVSS 4.6 (medium), 2023-02-08: IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an…
CVE-2022-34361 - CVSS 7.5 (high), 2022-12-06: IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
CVE-2021-29726 - CVSS 5.3 (medium), 2022-05-17: IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not properly ensure that a certificate is actually associated with…
CVE-2022-22336 - CVSS 7.5 (high), 2022-02-23: IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing…
CVE-2022-22333 - CVSS 6.5 (medium), 2022-02-23: IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty…
CVE-2021-29728 - CVSS 4.9 (medium), 2021-08-30: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its…
CVE-2021-29723 - CVSS 7.5 (high), 2021-08-30: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2021-29722 - CVSS 7.5 (high), 2021-08-30: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2021-29725 - CVSS 7.5 (high), 2021-07-15: IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consume resources…
CVE-2021-29749 - CVSS 6.5 (medium), 2021-07-15: IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an…
CVE-2020-4462 - CVSS 8.2 (high), 2020-07-16: IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an…
CVE-2016-6027 - CVSS 6.1 (medium), 2016-10-06: The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the HSTS protection…
CVE-2016-6026 - CVSS 5.3 (medium), 2016-10-06: The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows man-in-the-middle attackers to…
CVE-2016-6025 - CVSS 5.9 (medium), 2016-10-06: The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to obtain…
CVE-2016-6023 - CVSS 7.5 (high), 2016-10-06: Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1…
CVE-2013-0518 - CVSS 4.3 (medium), 2013-05-10: IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 does not refuse to be…
CVE-2013-0520 - CVSS 4 (medium), 2013-05-10: IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote…
CVE-2013-0519 - CVSS 5 (medium), 2013-05-10: IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-server…