Security Bulletin: Due to use of compiler-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by Cross-Site Scripting (XSS).

🗓️ 02 Jun 2026 14:44:53Reported by IBMType

ibm🔗 www.ibm.com👁 2 Views

Security bulletin: IBM Sterling Connect:Direct Web Services suffers XSS from compiler-18.2.14.tgz (CVE-2025-66412, CVE-2026-22610).

Reporter	Title	Published	Views	Family All 52
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities related to Angular and JJWT have been fixed in IBM Informix HQ 3.2.2.	27 Apr 202606:31	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of core-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by cross-site scripting (XSS) issue.	2 Jun 202614:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Mirror for i is vulnerable to cross-site scripting and cross-site request forgery due to Angular [CVE-2025-66412, CVE-2026-22610, CVE-2025-66035]	20 Feb 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	27 Apr 202610:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by Cross-Site Request Forgery and Cross-Site Scripting in Digital Certificate Manager and Navigator for i [CVE-2025-66035, CVE-2025-66412, CVE-2026-22610]	20 Feb 202616:42	–	ibm
GithubExploit	Exploit for CVE-2026-22610	18 Jan 202611:38	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Svelte Sveltekit	17 Dec 202522:50	–	githubexploit
Circl	CVE-2025-66412	2 Dec 202501:24	–	circl
Circl	CVE-2026-22610	10 Jan 202605:03	–	circl
CNNVD	Angular 跨站脚本漏洞	1 Dec 202500:00	–	cnnvd