IBM Sterling Connect vulnerabilities

3 CVEs affecting IBM Sterling Connect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4035, published 2018-05-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-6352, published 2013-02-02. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. The Session Manager in IBM Sterling Connect:Direct through 4.1.0.3 on UNIX allows remote attackers to cause a denial of service (daemon crash and disk consumption) via crafted data.
CVE-2013-4035, published 2018-05-01. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted…
CVE-2013-2989, published 2013-05-28. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows local users to bypass filesystem read…