Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-36064

IBM Sterling Connect:Express for Microsoft Windows information disclosure

Description

IBM Sterling Connect:Express for Microsoft Windows 3.1.0.0 through 3.1.0.22 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Sterling Connect:Express for Microsoft Windows

Default version status: unaffected

  • 3.1.0.0 to ≤ 3.1.0.22affected

References