Ibm Sterling Connect Direct For Unix vulnerabilities
6 known vulnerabilities affecting ibm/sterling_connect_direct_for_unix.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH4MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2020-4747P3CRITICALCVSS 9.8v4.2.0v4.3.0+2 more2020-12-15
CVE-2020-4747 [CRITICAL] CWE-287 CVE-2020-4747: IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtai
IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516.
nvd
CVE-2026-93888P3HIGHCVSS 7.8≥ 6.4.0.0, ≤ 6.4.0.6≥ 6.3.0.0, ≤ 6.3.0.72026-10-20
CVE-2026-93888 [HIGH] CWE-121 CVE-2026-93888: IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify ut
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
nvd
CVE-2026-105453P3HIGHCVSS 8.4≥ 6.3.0.0, ≤ 6.3.0.7≥ 6.4.0.0, ≤ 6.4.0.62026-10-20
CVE-2026-105453 [HIGH] CWE-269 CVE-2026-105453: IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.
nvd
CVE-2025-36137P3HIGHCVSS 7.2≥ 6.2.0.7, ≤ 6.2.0.9 iFix004≥ 6.4.0.0, ≤ 6.4.0.2 iFix001+1 more2025-10-30
CVE-2025-36137 [HIGH] CWE-250 CVE-2025-36137: IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix00
IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that could allow a privileged user to escalate their privileges further due to unnecessary privilege assignment for post
nvd
CVE-2020-4587P3HIGHCVSS 7.8v4.2.0v4.3.02020-08-24
CVE-2020-4587 [HIGH] CWE-787 CVE-2020-4587: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based b
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.
nvd
CVE-2018-1903P4MEDIUMCVSS 6.7v4.2.0v4.3.0+1 more2019-04-10
CVE-2018-1903 [MEDIUM] CVE-2018-1903: IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a system to manipulate CD UNIX to gain full sudo access. IBM X-Force ID: 152532.
nvd