[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6HZ0VNRo03Fda5V4uCm2SfyFook1bLOCWMN15MmE2kU":3,"g5a-ex:ibm\u002Fsterling_external_authentication_server@*":141,"g5a-family:ibm\u002Fsterling_external_authentication_server":143},{"success":4,"data":5},true,{"product":6,"versions":49,"topVulnerabilitiesByEpss":64,"kevVulnerabilities":118,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":48},"ibm","sterling_external_authentication_server",14,11,0,"2023-09-05",[14,18,20,22,24,26,29,32,34,36,38,40,43,46],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.2.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"2.3.01",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"2.4.0",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"2.4.1",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"2.4.2.0",{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"2.4.3.2",4,{"version":30,"cve_count":31,"kev_count":11,"has_kev":17},"3.4.3.2",3,{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},"6.0.0.0",{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.0.1",{"version":37,"cve_count":28,"kev_count":11,"has_kev":17},"6.0.1.0",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.1.1",{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},"6.0.2.0",6,{"version":44,"cve_count":45,"kev_count":11,"has_kev":17},"6.0.3.0",5,{"version":47,"cve_count":31,"kev_count":11,"has_kev":17},"6.1.0","Sterling External Authentication Server by Ibm is a technology product with 14 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[50,51,52,53,54,55,56,57,58,59,60,61,62,63],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},{"version":30,"cve_count":31,"kev_count":11,"has_kev":17},{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},{"version":37,"cve_count":28,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},{"version":44,"cve_count":45,"kev_count":11,"has_kev":17},{"version":47,"cve_count":31,"kev_count":11,"has_kev":17},[65,73,79,86,92,96,99,105,109,114],{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":72},"CVE-2020-4462","IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181482.","2020-07-16",8.2,"v3.1","High",0.03249,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":78},"CVE-2022-22336","IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing a denial of service due to a resource leak. IBM X-Force ID: 219395.","2022-02-23",7.5,0.01999,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":85},"CVE-2022-22349","IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import invalid data which could be used for an attack. IBM X-Force ID: 220144.","2022-02-24",4.3,"Medium",0.01,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":91},"CVE-2021-29728","IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.","2021-08-30",4.9,0.0099,{"cveId":93,"description":94,"publishedDate":89,"cvssScore":77,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":95},"CVE-2021-29722","IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095.",0.00919,{"cveId":97,"description":98,"publishedDate":89,"cvssScore":77,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":95},"CVE-2021-29723","IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-ForceID: 201100.",{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":104},"CVE-2013-0517","A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code.","2020-02-11",7.8,0.00585,{"cveId":106,"description":107,"publishedDate":76,"cvssScore":108,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":104},"CVE-2022-22333","IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and\u002For HTTP headers submitted. A local attacker positioned inside the Secure Zone could submit a specially crafted HTTP request to disrupt service. IBM X-Force ID: 219133.",6.5,{"cveId":110,"description":111,"publishedDate":12,"cvssScore":112,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":113},"CVE-2023-32338","IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access.  IBM X-Force ID:  255585.",5.5,0.00186,{"cveId":115,"description":116,"publishedDate":12,"cvssScore":112,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":117},"CVE-2023-29261","IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged information due to inadequate memory clearing during operations.  IBM X-Force ID:  252139.",0.00168,[],{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Sterling External Authentication Server by Ibm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sterling External Authentication Server by Ibm covering 14 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sterling External Authentication Server vulnerabilities, Sterling External Authentication Server security, Sterling External Authentication Server CVE, Ibm Sterling External Authentication Server, Sterling External Authentication Server threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Sterling External Authentication Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Fsterling_external_authentication_server",{"@type":129,"name":130,"url":131},"Organization","Ibm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fibm","Security Software","14 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sterling External Authentication Server Security Vulnerabilities","Security vulnerabilities affecting Sterling External Authentication Server by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":139,"apiVersion":140},"2026-10-17T17:48:33.039Z","3.0",{"rows":142,"total":11,"capped":17,"failed":11},[],[]]