IBM Sterling Secure Proxy
19 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-75792 | 6.2.0.0 – 6.2.1.2 | IBM Sterling Secure Proxy is vulnerable to multiple issues | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-78415 | 6.2.0.0 – 6.2.1.2 | IBM Sterling Secure Proxy is vulnerable to multiple issues | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-51453 | 6.2.0.0 – 6.2.0.1 | IBM Sterling Secure Proxy directory traversal | HIGH 7.5 | 0.5 % | ||
| CVE-2024-38341 | 6.0.0.0 – 6.0.3.1 ; 6.1.0.0 – 6.1.0.1 ; 6.2.0.0 – 6.2.0.1 | IBM Sterling Secure Proxy information disclosure | HIGH 7.5 | 0.2 % | ||
| CVE-2024-41783 | 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, 6.2.0.0 | IBM Sterling Secure Proxy improper input validation | CRITICAL 9.1 | 0.7 % | ||
| CVE-2024-38337 | 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, 6.2.0.0 | IBM Sterling Secure Proxy improper input validation | CRITICAL 9.1 | 0.5 % | ||
| CVE-2024-41784 | 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0 | IBM Sterling Secure Proxy directory traversal | HIGH 7.5 | 0.7 % | ||
| CVE-2023-29261 | 6.0.3, 6.1.0 | IBM Sterling Secure Proxy information disclosure | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-32338 | 6.0.3, 6.1.0 | IBM Sterling Secure Proxy information disclosure | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-34362 | 6.0.3 | IBM Sterling Secure Proxy HOST header injection | MEDIUM 4.6 | 0.4 % | ||
| CVE-2022-35720 | 6.0.3 | IBM Sterling External Authentication Server information disclosure | MEDIUM 5.5 | 0.1 % | ||
| CVE-2022-34361 | 6.0.3 | IBM Sterling Secure Proxy information disclosure | HIGH 7.5 | 0.4 % | ||
| CVE-2021-29726 | 6.0.3 | IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not properly ensure that a certificate is actually | MEDIUM 5.3 | 0.9 % | ||
| CVE-2022-22336 | 3.4.3.2 ; 6.0.3.0 ; 6.0.2.0 | IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume | HIGH 7.5 | 2.0 % | ||
| CVE-2022-22333 | 3.4.3.2 ; 6.0.3.0 ; 6.0.2.0 | IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, du | MEDIUM 6.5 | 0.6 % | ||
| CVE-2021-29728 | 3.4.3.2 ; 2.4.3.2 ; 6.0.1 ; … | IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which | MEDIUM 4.9 | 1.0 % | ||
| CVE-2021-29723 | 3.4.3.2 ; 2.4.3.2 ; 6.0.1 ; … | IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker | HIGH 7.5 | 0.9 % | ||
| CVE-2021-29722 | 3.4.3.2 ; 2.4.3.2 ; 6.0.1 ; … | IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker | HIGH 7.5 | 0.9 % | ||
| CVE-2020-4462 | 3.4.2 ; 3.4.3 ; 2.4.3 ; … | IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 ar | HIGH 8.2 | 3.2 % |