Control Center

control_center

Vendor: Ibm • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-43052 1Ibm 1Control Center Jun 17, 2026 Mar 7, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the appli...Show more IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with.Show less
CVE-2024-35114 1Ibm 1Control Center Jun 17, 2026 Jan 25, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts.
CVE-2024-35113 1Ibm 1Control Center Jun 17, 2026 Jan 25, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Control Center 6.2.1 and 6.3.1 could allow an authenticated user to obtain sensitive information exposed through a directory listing.
CVE-2024-35112 1Ibm 1Control Center Jun 17, 2026 Jan 25, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks aga...Show more IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.Show less
CVE-2024-35111 1Ibm 1Control Center Jun 17, 2026 Jan 25, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks again...Show more IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.Show less
CVE-2021-20529 1Ibm 1Control Center Jun 17, 2026 May 19, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763.
CVE-2021-20528 1Ibm 1Control Center Jun 17, 2026 May 19, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...Show more IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761.Show less
CVE-2017-1758 1Ibm 3Control Center Financial Transaction ManagerTransformation Extender Advanced Nov 21, 2024 Feb 21, 2018 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulner...Show more IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.Show less
CVE-2016-0252 1Ibm 2Control Center Sterling Control Center May 6, 2026 Jul 8, 2016 N/A· v4 5.1 MEDIUM· v3 1.9 LOW· v2 IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors.