CVE-2024-38337criticalCWE-732

CVE-2024-38337: critical vulnerability in IBM Sterling Secure Proxy

IBM Sterling Secure Proxy improper input validation

Published · Updated

Follow this CVE+ Monitor Sterling Secure Proxy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 0.5%
IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive information contents due to incorrect permission assignments.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
IBM · Sterling Secure Proxy
Related CVEs — IBM Sterling Secure Proxy

In the same product, most dangerous first.

CVE-2020-4462HIGHCVE-2020-4462EPSS 3.2%CVE-2022-22336HIGHCVE-2022-22336EPSS 2.0%CVE-2021-29728MEDIUMCVE-2021-29728EPSS 1.0%CVE-2021-29723MEDIUMCVE-2021-29723EPSS 0.9%CVE-2021-29722MEDIUMCVE-2021-29722EPSS 0.9%CVE-2021-29726MEDIUMCVE-2021-29726EPSS 0.9%