Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_external_authentication_server:6.0.1.0:*:*:*:*:*:*:*

part: a version: 6.0.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling External Authentication Server (bedcd575-ae5a-58f2-b472-524ddae1939c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29728 vulnerable 2026-06-08 05:31:26.887155 Details available
MEDIUM (4.9)
IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.
Published: 2021-08-30T17:00:27.523Z
Updated: 2024-09-16T16:53:36.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29723 vulnerable 2026-06-08 05:31:26.876171 Details available
MEDIUM (5.9)
IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-ForceID: 201100.
Published: 2021-08-30T17:00:25.900Z
Updated: 2024-09-16T20:57:51.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29722 vulnerable 2026-06-08 05:31:26.871220 Details available
MEDIUM (5.9)
IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095.
Published: 2021-08-30T17:00:24.151Z
Updated: 2024-09-16T16:32:56.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4462 vulnerable 2026-06-08 05:25:59.366832 Details available
HIGH (8.2)
IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181482.
Published: 2020-07-16T15:05:35.729Z
Updated: 2024-09-16T16:53:09.458Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.