IBM Sterling Connect Direct User Interface vulnerabilities

3 CVEs affecting IBM Sterling Connect Direct User Interface, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20560, published 2021-07-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-0529, published 2013-06-21. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote…
CVE-2021-20560, published 2021-07-26. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site,…
CVE-2013-0527, published 2013-06-21. Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days. The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not close pages upon the timeout of a session, which allows physically proximate attackers to obtain…