Skip to content
OpenAdvisories
Medium WID-SEC-2026-0417 1 CVE

IBM Sterling Connect:Direct: Schwachstelle ermöglicht Denial of Service

Published Feb 15, 2026 · Updated Feb 15, 2026 · de-DE

Vendor: IBM Product: Sterling Connect:Direct

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Sterling Connect:Direct ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM Sterling Connect:Direct ist ein Managed-File-Transfer-Produkt.

Vulnerabilities 1

  • Medium 5.5
    CVE-2025-66453

    Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function

    Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and …

    Mozilla rhino rhino rhino Debian Ubuntu Azure Linux Maven

Revision history

  1. #1

    Initiale Fassung

References