Advisories · Technology

IBM Sterling Connect:Direct Web Services.

Every CVE that names IBM Sterling Connect:Direct Web Services among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-45651 CVE record

CVSS 6.3 Medium

IBM Sterling Connect:Direct Web Services session fixation
- IBM Sterling Connect:Direct Web Services
- Authentication bypass
Not analysed yet 18 Apr 2025
CVE-2024-49808 CVE record

CVSS 6.3 Medium

IBM Sterling Connect:Direct Web Services improper authorization
- IBM Sterling Connect:Direct Web Services
- Broken access control
Not analysed yet 18 Apr 2025
CVE-2024-45653 CVE record

CVSS 4.3 Medium

IBM Sterling Connect:Direct Web Services information disclosure
- IBM Sterling Connect:Direct Web Services
- Information disclosure
Not analysed yet 19 Jan 2025
CVE-2024-39747 CVE record

CVSS 8.1 High

IBM Sterling Connect:Direct Web Services information disclosure
- IBM Sterling Connect:Direct Web Services
- CWE-1392
Not analysed yet 31 Aug 2024
CVE-2024-39745 CVE record

CVSS 5.9 Medium

IBM Sterling Connect:Direct Web Services information disclosure
- IBM Sterling Connect:Direct Web Services
- Weak cryptography or TLS
Not analysed yet 22 Aug 2024
CVE-2024-39744 CVE record

CVSS 4.3 Medium

IBM Sterling Connect:Direct Web Services cross-site request forgery
- IBM Sterling Connect:Direct Web Services
- Cross-site request forgery (CSRF)
Not analysed yet 22 Aug 2024
CVE-2024-39746 CVE record

CVSS 5.9 Medium

IBM Sterling Connect:Direct Web Services information disclosure
- IBM Sterling Connect:Direct Web Services
- Weak cryptography or TLS
Not analysed yet 22 Aug 2024