Advisories · Technology

IBM Sterling Connect Direct for Unix.

Every CVE that names IBM Sterling Connect Direct for Unix among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93888 CVE record

CVSS 7.8 High

IBM Sterling Connect:Direct for Unix Buffer Overflow
- IBM Sterling Connect Direct for Unix
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-105453 CVE record

CVSS 8.4 High

IBM Sterling Connect:Direct for Unix Improper Privilege Management
- IBM Sterling Connect Direct for Unix
- Privilege escalation
Not analysed yet 19 Oct 2026
CVE-2025-36137 CVE record

CVSS 7.2 High

IBM Sterling Connect:Direct for UNIX command execution
- IBM Sterling Connect:Direct for Unix
- Privilege escalation
Not analysed yet 30 Oct 2025
CVE-2020-4747 CVE record

CVSS 7.4 High

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods.
- IBM Sterling Connect:Direct for UNIX
Not analysed yet 15 Dec 2020
CVE-2020-4587 CVE record

CVSS 8.4 High

IBM Sterling Connect:Direct for UNIX: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0…
- IBM Sterling Connect:Direct for UNIX
- IBM Connect:Direct for UNIX
Not analysed yet 24 Aug 2020
CVE-2018-1903 CVE record

CVSS 6.7 Medium

IBM Sterling Connect:Direct for UNIX: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0…
- IBM Sterling Connect:Direct for UNIX
Not analysed yet 10 Apr 2019