https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-43035.htmlhttps://patchthecve.com/cve/CVE-2023-43035.htmlWed, 17 Jun 2026 06:25:00 +0000MEDIUM 4.0: IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system.https://patchthecve.com/cve/CVE-2023-42007.htmlhttps://patchthecve.com/cve/CVE-2023-42007.htmlWed, 17 Jun 2026 06:23:15 +0000MEDIUM 5.4: IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.https://patchthecve.com/cve/CVE-2023-35894.htmlhttps://patchthecve.com/cve/CVE-2023-35894.htmlWed, 17 Jun 2026 06:05:25 +0000MEDIUM 5.4: IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.