Sterling Connect Direct Web Services
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_connect_direct_web_services:6.3.0.0:*:*:*:*:windows:*:*
part: a version: 6.3.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling Connect Direct Web Services (8726249f-dd17-5d36-b59b-6334fe675919) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | windows |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-49808 |
vulnerable | 2026-06-08 06:50:14.716588 |
IBM Sterling Connect:Direct Web Services improper authorization
MEDIUM (6.3)
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions.
Published: 2025-04-18T11:03:58.511Z
Updated: 2025-09-01T00:41:53.758Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45653 |
vulnerable | 2026-06-08 06:48:08.779621 |
IBM Sterling Connect:Direct Web Services information disclosure
MEDIUM (4.3)
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system.
Published: 2025-01-19T02:39:30.681Z
Updated: 2025-01-21T20:29:11.755Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45651 |
vulnerable | 2026-06-08 06:48:08.772004 |
IBM Sterling Connect:Direct Web Services session fixation
MEDIUM (6.3)
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0
does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.
Published: 2025-04-18T11:04:55.508Z
Updated: 2025-09-01T00:41:10.652Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39747 |
vulnerable | 2026-06-08 06:41:51.518915 |
IBM Sterling Connect:Direct Web Services information disclosure
HIGH (8.1)
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality.
Published: 2024-08-31T01:01:03.974Z
Updated: 2024-09-01T21:30:21.072Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.