Vulnerability · Published Sep 14, 2026 · Assigned by ibm
CVE-2026-78415IBM Sterling Secure Proxy is vulnerable to multiple issues
Medium 5.4
In plain English
A medium-severity cross-site scripting in Sterling Secure Proxy from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.3%top 76.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Sterling Secure Proxy | 6.2.0.0 – through 6.2.1.2 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
References
- https://www.ibm.com/support/pages/node/7287369 vendor-advisory, patch