Skip to content
OpenAdvisories

Product · IBM

Sterling Control Center

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.0
    CVE-2023-43035

    IBM Sterling Control Center information disclosure

    IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system.

    IBM Sterling Control Center
  • Medium 5.4
    CVE-2023-42007

    IBM Sterling Control Center cross-site scripting

    IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure …

    IBM Sterling Control Center
  • Medium 5.4
    CVE-2023-35020

    IBM Sterling Control Center directory traversal

    IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 257874.

    IBM Sterling Control Center