IBM Sterling External Authentication Server

• CVE-2022-35720 Low 2.3 IBM Sterling External Authentication Server information disclosure 0.1%
• CVE-2022-22349 Medium 4.3 IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import i 1.0%
• CVE-2020-4462 High 8.2 IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an XML External Entity Injection (XXE) attac 3.2%