VendorsIBMcontrol_centerall versions
Vulnerabilities

IBM Control Center

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2017-1758
IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
Published 2018-02-21 · Modified
7.1EPSS 0.016
CVE-2024-35113
IBM Control Center information disclosure
Published 2025-01-25 · Analyzed
6.5EPSS 0.003
CVE-2021-20528
IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761.
Published 2021-05-19 · Modified
5.4EPSS 0.005
CVE-2024-35112
IBM Control Center cross-site scripting
Published 2025-01-25 · Analyzed
5.4EPSS 0.003
CVE-2021-20529
IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763.
Published 2021-05-19 · Modified
5.3EPSS 0.009
CVE-2024-35114
IBM Control Center information disclosure
Published 2025-01-25 · Analyzed
5.3EPSS 0.004
CVE-2023-43052
IBM Control Center external service interaction
Published 2025-03-07 · Analyzed
5.3EPSS 0.004
CVE-2016-0252
IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors.
Published 2016-07-08 · Modified
5.1EPSS 0.003
CVE-2024-35111
IBM Control Center information disclosure
Published 2025-01-25 · Analyzed
4.3EPSS 0.004