Sterling Connect
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_connect:express_for_unix:*:*:*:*:*:*:*:*
part: a version: express_for_unix update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling Connect (587a1d5f-b496-5f69-ba9a-5ebbbc55aed5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32331 |
vulnerable | 2026-06-08 06:04:45.508468 |
IBM Connect:Express for UNIX denial of service
HIGH (7.5)
IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI. IBM X-Force ID: 254979.
Published: 2024-03-04T18:38:46.392Z
Updated: 2024-08-02T15:10:24.878Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29260 |
vulnerable | 2026-06-08 06:02:39.237324 |
IBM Sterling Connect:Express for UNIX server-side request forgery
MEDIUM (6.5)
IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 252135.
Published: 2023-07-19T01:17:31.614Z
Updated: 2024-10-28T15:08:24.496Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29259 |
vulnerable | 2026-06-08 06:02:39.235718 |
IBM Sterling Connect:Express for UNIX information disclosure
LOW (3.7)
IBM Sterling Connect:Express for UNIX 1.5 browser UI is vulnerable to attacks that rely on the use of cookies without the SameSite attribute. IBM X-Force ID: 252055.
Published: 2023-07-19T01:14:57.925Z
Updated: 2024-10-21T18:55:22.488Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26023 |
vulnerable | 2026-06-08 05:57:37.871683 |
IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure
MEDIUM (6.5)
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
Published: 2023-07-19T01:34:32.650Z
Updated: 2024-10-21T13:04:45.326Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38933 |
vulnerable | 2026-06-08 05:33:48.588684 |
IBM Sterling Connect:Express for UNIX information disclosure
MEDIUM (5.9)
IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210574.
Published: 2023-07-19T01:22:12.736Z
Updated: 2024-10-21T18:12:35.944Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.