Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_secure_proxy:6.0.3:*:*:*:*:*:*:*

part: a version: 6.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling Secure Proxy (6afa8e1a-cc0f-589e-964c-1f36817a38ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47699 vulnerable 2026-06-08 06:14:25.423073 IBM Secure Proxy cross-site scripting
MEDIUM (6.1)
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 270974.
Published: 2024-03-15T15:11:38.385Z
Updated: 2024-08-02T21:16:43.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47162 vulnerable 2026-06-08 06:14:24.123063 IBM Secure Proxy cross-site scripting
MEDIUM (6.1)
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 270973.
Published: 2024-03-15T15:06:29.746Z
Updated: 2024-08-02T21:01:22.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47147 vulnerable 2026-06-08 06:14:24.080782 IBM Secure Proxy file manipulation
MEDIUM (5.9)
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow an attacker to overwrite a log message under specific conditions. IBM X-Force ID: 270598.
Published: 2024-03-15T15:09:59.091Z
Updated: 2024-08-02T21:01:22.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46182 vulnerable 2026-06-08 06:12:44.328886 IBM Secure Proxy cross-site scripting
MEDIUM (5.4)
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 269692.
Published: 2024-03-15T14:45:18.219Z
Updated: 2024-08-02T20:37:40.074Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46181 vulnerable 2026-06-08 06:12:44.328454 IBM Secure Proxy information disclosure
MEDIUM (4)
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 269686.
Published: 2024-03-15T15:13:49.550Z
Updated: 2024-08-02T20:37:40.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46179 vulnerable 2026-06-08 06:12:44.326499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32338 vulnerable 2026-06-08 06:04:45.528048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35720 vulnerable 2026-06-08 05:46:05.196962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34362 vulnerable 2026-06-08 05:44:52.701690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34361 vulnerable 2026-06-08 05:44:52.701126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29726 vulnerable 2026-06-08 05:31:26.885830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.