Product by IBM

    Sterling Connect\

    22 known vulnerabilities in Sterling Connect\ (IBM), 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sterling Connect\ (IBM)
    HighCVE-2020-4767

    IBM Sterling Connect Direct for Microsoft Windows: Buffer Over-read

    		7.5
    HighCVE-2021-38890

    IBM Connect:Direct Web Services: security vulnerability

    		5.9
    HighCVE-2023-32331

    IBM Connect:Express for UNIX denial of service

    also in 1 other product

    		7.5
    MediumCVE-2025-36064

    IBM Sterling Connect:Express for Microsoft Windows information disclosure

    		5.9
    HighCVE-2025-36137

    IBM Sterling Connect:Direct for UNIX command execution

    also in 1 other product

    		7.2
    HighCVE-2021-38891

    IBM Connect:Direct Web Services: security vulnerability

    		5.9
    HighCVE-2013-4035

    IBM Sterling Connect:Direct for Unix: security vulnerability

    		7.3
    HighCVE-2020-4587

    IBM Sterling Connect:Direct for UNIX: security vulnerability

    also in 1 other product

    		8.4
    MediumCVE-2025-36065

    IBM Sterling Connect:Direct for Unix: Insufficient Session Expiration

    also in 1 other product

    		6.3
    MediumCVE-2025-36063

    IBM Sterling Connect:Direct for Unix: Insufficient Session Expiration

    also in 1 other product

    		6.3
    MediumCVE-2025-36115

    IBM Sterling Connect:Direct for Unix: Session Fixation

    also in 1 other product

    		6.3
    Not ratedCVE-2012-6352

    IBM Sterling Connect:Direct for Unix: Denial of Service

    		—
    MediumCVE-2025-36066

    IBM Sterling Connect:Direct for Unix: Cross-site Scripting

    also in 1 other product

    		6.1
    MediumCVE-2018-1903

    IBM Sterling Connect:Direct for UNIX: security vulnerability

    also in 1 other product

    		6.7
    MediumCVE-2023-29260

    IBM Sterling Connect:Express for UNIX server-side request forgery

    also in 1 other product

    		6.5
    HighCVE-2021-38933

    IBM Sterling Connect:Express for UNIX information disclosure

    also in 1 other product

    		5.9
    MediumCVE-2025-36113

    IBM Sterling Connect:Direct for Unix: Cross-site Scripting

    also in 1 other product

    		5.4
    MediumCVE-2023-29259

    IBM Sterling Connect:Express for UNIX information disclosure

    also in 1 other product

    		3.7
    MediumCVE-2016-5991

    IBM Sterling Connect:Direct for Unix: Privilege Escalation

    		4.5
    LowCVE-2016-0380

    IBM Sterling Connect:Direct for Unix: Information Disclosure

    		3.3
    LowCVE-2016-5992

    IBM Sterling Connect:Direct for Unix: Denial of Service

    		2.5
    Not ratedCVE-2013-2989

    IBM Sterling Connect:Direct for Unix: security vulnerability

    		—

    All products by IBM