Advisories · Technology

IBM Sterling Secure Proxy.

Every CVE that names IBM Sterling Secure Proxy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75792 CVE record

CVSS 4.3 Medium

IBM Sterling Secure Proxy is vulnerable to multiple issues
- IBM Sterling Secure Proxy
- Broken access control
Not analysed yet 14 Sept 2026
CVE-2026-78415 CVE record

CVSS 5.4 Medium

IBM Sterling Secure Proxy is vulnerable to multiple issues
- IBM Sterling Secure Proxy
- Cross-site scripting (XSS)
Not analysed yet 14 Sept 2026
CVE-2024-51453 CVE record

CVSS 4.3 Medium

IBM Sterling Secure Proxy directory traversal
- IBM Sterling Secure Proxy
- Path traversal
Not analysed yet 28 May 2025
CVE-2024-38341 CVE record

CVSS 5.9 Medium

IBM Sterling Secure Proxy information disclosure
- IBM Sterling Secure Proxy
- Weak cryptography or TLS
Not analysed yet 28 May 2025
CVE-2024-41783 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IBM Sterling Secure Proxy improper input validation
- IBM Sterling Secure Proxy
Not analysed yet 19 Jan 2025
CVE-2024-38337 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IBM Sterling Secure Proxy improper input validation
- IBM Sterling Secure Proxy
- Broken access control
Not analysed yet 19 Jan 2025
CVE-2024-41784 CVE record

CVSS 7.5 High

IBM Sterling Secure Proxy directory traversal
- IBM Sterling Secure Proxy
- CWE-32
Not analysed yet 15 Nov 2024
CVE-2023-29261 CVE record

CVSS 5.1 Medium

IBM Sterling Secure Proxy information disclosure
- IBM Sterling Secure Proxy
- Information disclosure
Not analysed yet 5 Sept 2023
CVE-2023-32338 CVE record

CVSS 5.1 Medium

IBM Sterling Secure Proxy information disclosure
- IBM Sterling Secure Proxy
Not analysed yet 4 Sept 2023
CVE-2022-34362 CVE record

CVSS 4.6 Medium

IBM Sterling Secure Proxy HOST header injection
- IBM Sterling Secure Proxy
Not analysed yet 8 Feb 2023
CVE-2022-35720 CVE record

CVSS 2.3 Low

IBM Sterling External Authentication Server information disclosure
- IBM Sterling External Authentication Server
- IBM Sterling Secure Proxy
- Weak cryptography or TLS
Not analysed yet 8 Feb 2023
CVE-2022-34361 CVE record

CVSS 5.9 Medium

IBM Sterling Secure Proxy information disclosure
- IBM Sterling Secure Proxy
- Weak cryptography or TLS
Not analysed yet 6 Dec 2022
CVE-2021-29726 CVE record

CVSS 5.3 Medium

IBM Secure External Authentication Server: IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does…
- IBM Secure External Authentication Server
- IBM Sterling Secure Proxy
Not analysed yet 17 May 2022
CVE-2022-22336 CVE record

CVSS 7.5 High

IBM Sterling Secure Proxy: IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0…
- IBM Sterling Secure Proxy
Not analysed yet 23 Feb 2022
CVE-2022-22333 CVE record

CVSS 6.5 Medium

IBM Sterling Secure Proxy: IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0…
- IBM Sterling Secure Proxy
Not analysed yet 23 Feb 2022
CVE-2021-29728 CVE record

CVSS 4.9 Medium

IBM Sterling Secure Proxy: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2…
- IBM Sterling Secure Proxy
Not analysed yet 30 Aug 2021
CVE-2021-29723 CVE record

CVSS 5.9 Medium

IBM Sterling Secure Proxy: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2…
- IBM Sterling Secure Proxy
Not analysed yet 30 Aug 2021
CVE-2021-29722 CVE record

CVSS 5.9 Medium

IBM Sterling Secure Proxy: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2…
- IBM Sterling Secure Proxy
Not analysed yet 30 Aug 2021
CVE-2020-4462 CVE record

CVSS 8.2 High

IBM Sterling Secure Proxy: IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2…
- IBM Sterling Secure Proxy
- IBM External Authentication Server
Not analysed yet 16 Jul 2020