| CVE-2024-45651 |
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure…
|
6.3
Medium
|
Apr 18, 2025 |
| CVE-2024-49808 |
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity…
|
6.3
Medium
|
Apr 18, 2025 |
| CVE-2024-45653 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to…
|
4.3
Medium
|
Jan 19, 2025 |
| CVE-2024-39747 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical…
|
8.1
High
|
Aug 31, 2024 |
| CVE-2024-39745 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms…
|
5.9
Medium
|
Aug 22, 2024 |
| CVE-2024-39744 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which…
|
4.3
Medium
|
Aug 22, 2024 |
| CVE-2024-39746 |
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive…
|
5.9
Medium
|
Aug 22, 2024 |