Skip to content
Sign in
5.4 Medium

CVE-2023-42007 IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting

Description

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Sterling Control Center 6.4.0 No fix stated
Sterling Control Center 6.3.1 No fix stated
Sterling Control Center 6.2.1 No fix stated

Other CVEs of Sterling Control Center

The 3 CVEs of Sterling Control Center →
CVE-2023-43035 IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another… 4.0 Medium CVE-2023-35020 IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system 5.4 Medium
Track this CVE