CVE-2024-41783— IBM Sterling Secure Proxy improper input validation
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-41783
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Sterling Secure Proxy improper input validation
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying operating system due to improper validation of a specified type of input.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Sterling Secure Proxy 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Sterling Secure Proxy是美国国际商业机器（IBM）公司的一个用于确保组织非保护区(DMZ)中文件安全传输的应用程序代理。 IBM Sterling Secure Proxy存在安全漏洞，该漏洞源于特定类型输入的验证不当，允许特权用户将命令注入底层操作系统。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Sterling Secure Proxy | 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, 6.2.0.0 | cpe:2.3:a:ibm:sterling_secure_proxy:6.0.0.0:*:*:*:*:*:*:* |
II. Public POCs for CVE-2024-41783
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-41783
请登录查看更多情报信息。
Same Patch Batch · IBM · 2025-01-19 · 7 CVEs total
| CVE-2024-38337 | 9.1 CRITICAL | IBM Sterling Secure Proxy improper input validation |
| CVE-2024-41743 | 7.5 HIGH | IBM TXSeries for Multiplatforms denial of service |
| CVE-2024-41742 | 7.5 HIGH | IBM TXSeries for Multiplatforms denial of service |
| CVE-2024-45652 | 6.5 MEDIUM | IBM Maximo Asset Management directory traversal |
| CVE-2024-45654 | 4.3 MEDIUM | IBM Security ReaQta improper input validation |
| CVE-2024-45653 | 4.3 MEDIUM | IBM Sterling Connect:Direct Web Services information disclosure |
IV. Related Vulnerabilities
Same product: Sterling Secure Proxy
- CVE-2024-51453
IBM Sterling Secure Proxy directory traversal - CVE-2024-38341
IBM Sterling Secure Proxy information disclosure - CVE-2024-38337
IBM Sterling Secure Proxy improper input validation - CVE-2024-41784
IBM Sterling Secure Proxy directory traversal - CVE-2023-29261
IBM Sterling Secure Proxy information disclosure
Same vendor: IBM
- CVE-2026-1577
IBM® Db2® is vulnerable to a denial of service with a specia - CVE-2025-36122
IBM® Db2® is vulnerable to a denial of service with a specia - CVE-2025-14688
IBM® Db2® is vulnerable to a denial of service when fetching - CVE-2026-2311
IBM i is affected by a privilege escalation vulnerability in - CVE-2025-36180
Inadequate Pod Communication Restrictions, affects watsonx.d
V. Comments for CVE-2024-41783
No comments yet