Security Bulletin: IBM Sterling Control Center is affected by improper input validation (CVE-2023-42007)

Summary Improper input validation is impacting IBM Sterling Control Center v6.4.0.0, v6.3.1.0 and v6.2.1.0. User supplied input is getting reflected as it is in the response without being validated at sever end. Customers must upgrade to latest patch below to address this vulnerability...

CVE-2023-42007

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2023-42007

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2023-43035

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system...

CVE-2023-43035

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system...

Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities reported in Jetty server (CVE-2024-8184, CVE-2024-6763)

Summary Multiple vulnerabilities over Eclipse Jetty is affecting IBM Sterling Control Center v6.3.1.0 and v6.4.0.0. Customers must upgrade to latest patch below to address this vulnerability. Vulnerability Details CVEID:CVE-2024-8184 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service...

CVE-2023-43035 IBM Sterling Control Center information disclosure

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system...

CVE-2023-43035

CVE-2023-43035 affects IBM Sterling Control Center 6.2.1.0, 6.3.1.0, and 6.4.0.0. The issue allows web pages to be stored locally and read by another user on the same system (information disclosure; CWE-525). IBM’s bulletin lists the vulnerable versions and fixes: upgrade to 6.2.1.0 iFix15, 6.3.1...

CVE-2023-43035 IBM Sterling Control Center information disclosure

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system...

CVE-2023-42007

Summary: IBM Sterling Control Center (versions 6.2.1, 6.3.1, 6.4.0) is vulnerable to cross-site scripting due to improper input validation/reflection in the Web UI, potentially enabling an attacker to embed arbitrary JavaScript and disclose credentials within a trusted session. Impact (as stated)...

CVE-2023-42007 IBM Sterling Control Center cross-site scripting

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2023-42007 IBM Sterling Control Center cross-site scripting

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-27812

MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation...

CVE-2025-27813

MSI Center before 2.0.52.0 has Missing PE Signature Validation...

CVE-2025-20934

Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege...

IBM Sterling Control Center 安全漏洞

IBM Sterling Control Center is an application system from International Business Machines IBM, Inc. A centralized monitoring and management system. A security vulnerability exists in IBM Sterling Control Center versions 6.2.1, 6.3.1, and 6.4.0 that originates from a web page that can be stored...

Micro-Star MSI Center 安全漏洞

Micro-Star MSI Center is a monitoring and management platform from Micro-Star China. You can find all your favorite features such as Game Mode or Smart Priority in the Feature Set page. A security vulnerability exists in Micro-Star MSI Center versions prior to 2.0.52.0, which stems from a lack of...

Micro-Star MSI Center 安全漏洞

Micro-Star MSI Center is a monitoring and management platform from Micro-Star China. You can find all your favorite features such as Game Mode or Smart Priority in the Feature Set page. A security vulnerability exists in Micro-Star MSI Center versions prior to 2.0.52.0, which stems from a TOCTOU...

PT-2025-15984 · Ibm · Ibm Sterling Control Center

Name of the Vulnerable Software and Affected Versions: IBM Sterling Control Center versions 6.2.1 through 6.4.0 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a...

CVE-2025-27813

CVE-2025-27813 affects MSI Center prior to 2.0.52.0. The root cause is Missing PE Signature Validation, leading to potential tampering of PE-signature verified binaries. The CVSS 3.1 score is 8.1 (HIGH) with LOCAL attack vector, high attack complexity, no privileges required, and impact to confid...