CVE-2014-0925: IBM Sterling Control Center

Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected products

• IBM Sterling Control Center: version 5.4.0 only; version 5.4.0.1 only; version 5.4.1.0 only

Published 2014-05-30. Last modified 2026-06-17.