| CVE-2024-45651 |
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure…
|
6.3
Moyenne
|
18 avr. 2025 |
| CVE-2024-49808 |
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity…
|
6.3
Moyenne
|
18 avr. 2025 |
| CVE-2024-45653 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to…
|
4.3
Moyenne
|
19 janv. 2025 |
| CVE-2024-39747 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical…
|
8.1
Élevée
|
31 août 2024 |
| CVE-2024-39745 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms…
|
5.9
Moyenne
|
22 août 2024 |
| CVE-2024-39744 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which…
|
4.3
Moyenne
|
22 août 2024 |
| CVE-2024-39746 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive…
|
5.9
Moyenne
|
22 août 2024 |