sterling connect direct web services vulnerabilities and fixes

Recent CVEs affecting sterling connect direct web services, with upgrade or downgrade steps. 7 tracked.

Also searched as: sterlingconnectdirectwebservices.

sterling connect direct web services has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-04-18. Highest priority: CVE-2024-39747 (score 47/100).

• CVE-2024-49808 MEDIUM 6.3 UPGRADE IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof th
• CVE-2024-45653 MEDIUM 4.3 DOWNGRADE IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address informatio
• CVE-2024-45651 MEDIUM 6.3 UPGRADE IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser
• CVE-2024-39747 HIGH 8.1 UPGRADE IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially criti
• CVE-2024-39746 MEDIUM 5.9 DOWNGRADE IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensit
• CVE-2024-39745 MEDIUM 5.9 DOWNGRADE IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algori
• CVE-2024-39744 MEDIUM 4.3 DOWNGRADE IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery wh

FAQ

How do I fix sterling connect direct web services vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sterling connect direct web services being exploited right now?

None of the tracked sterling connect direct web services CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sterling connect direct web services CVE should I patch first?

CVE-2024-39747 currently ranks highest (47/100): IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially criti.

RSS feed for sterling connect direct web services · ← Back to latest CVEs