IBM Sterling External Authentication Server
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-35720 | 6.1.0 | IBM Sterling External Authentication Server information disclosure | MEDIUM 5.5 | 0.1 % | ||
| CVE-2022-22349 | 6.0.3.0 ; 6.0.2.0 ; 3.4.3.2 | IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating R | MEDIUM 4.3 | 1.0 % | ||
| CVE-2020-4462 | 2.4.2 ; 2.4.3.2 | IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 ar | HIGH 8.2 | 3.2 % | ||
| CVE-2013-0517 | 2.2.0 ; 2.3.01 ; 2.4.0 ; … | A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified O | HIGH 7.8 | 0.6 % |