IBM Control Center 6.2.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:control_center:6.2.1.0:*:*:*:*:*:*:*
part: a version: 6.2.1.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Control Center (ce81c0fa-630b-5ef9-a4f3-e1d173d6df1f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-35114 |
vulnerable | 2026-06-08 06:37:35.217354 |
IBM Control Center information disclosure
MEDIUM (5.3)
IBM Control Center 6.2.1 and 6.3.1
could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts.
Published: 2025-01-25T13:33:25.352Z
Updated: 2025-01-27T17:05:10.986Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35113 |
vulnerable | 2026-06-08 06:37:35.216979 |
IBM Control Center information disclosure
MEDIUM (4.3)
IBM Control Center 6.2.1 and 6.3.1
could allow an authenticated user to obtain sensitive information exposed through a directory listing.
Published: 2025-01-25T13:32:39.872Z
Updated: 2025-01-27T17:29:43.139Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35112 |
vulnerable | 2026-06-08 06:37:35.216459 |
IBM Control Center cross-site scripting
MEDIUM (5.4)
IBM Control Center 6.2.1 and 6.3.1
could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Published: 2025-01-25T13:31:25.755Z
Updated: 2025-01-27T17:30:11.832Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35111 |
vulnerable | 2026-06-08 06:37:35.214723 |
IBM Control Center information disclosure
MEDIUM (4.3)
IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Published: 2025-01-25T13:29:55.296Z
Updated: 2025-01-27T17:30:46.205Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43052 |
vulnerable | 2026-06-08 06:11:09.844914 |
IBM Control Center external service interaction
MEDIUM (5.3)
IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with.
Published: 2025-03-07T16:55:51.661Z
Updated: 2025-08-16T23:43:09.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43035 |
vulnerable | 2026-06-08 06:11:09.793363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42007 |
vulnerable | 2026-06-08 06:11:07.672588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35894 |
vulnerable | 2026-06-08 06:06:28.066905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.