Vulnerabilities

TI-2023-24810 CVE-2023-46181 · GHSA-xp2v-rf5w-rh2c

IBM Secure Proxy information disclosure

LOW 18

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 allows web pages to be stored locally which can be read by another user on the system.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.0018 Published 2024-03-15 No fix listed CWE-525

TI-2023-25836 CVE-2023-47699 · GHSA-r8q8-gv4c-jp9r

LOW 27

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00348 Published 2024-03-15 No fix listed CWE-79

TI-2023-25480 CVE-2023-47147 · GHSA-65h7-6ww6-hhqj

LOW 27

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow an attacker to overwrite a log message under specific conditions.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00415 Published 2024-03-15 No fix listed CWE-73

TI-2023-24809 CVE-2023-46179 · GHSA-h2v7-3fqq-7ff5

LOW 20

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 does not set the secure attribute on authorization tokens or session cookies.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00281 Published 2024-03-15 No fix listed CWE-614

TI-2023-25488 CVE-2023-47162 · GHSA-w98r-cv47-64m4

LOW 27

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00348 Published 2024-03-15 No fix listed CWE-79

TI-2023-24811 CVE-2023-46182 · GHSA-jg7x-vf3c-4w2p

LOW 24

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00362 Published 2024-03-15 No fix listed CWE-79