IBM Sterling Secure Proxy 6.2.0.06.2.1.2 UI Spoofing via Improper HTML Neutralization
CVE-2026-78415 Published on September 14, 2026
IBM Sterling Secure Proxy is vulnerable to multiple issues
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup.
Vulnerability Analysis
CVE-2026-78415 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.
Weakness Type
What is a XSS Vulnerability?
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVE-2026-78415 has been classified to as a XSS vulnerability or weakness.
Products Associated with CVE-2026-78415
Want to know whenever a new CVE is published for IBM Sterling Secure Proxy? stack.watch will email you.
Affected Versions
IBM Sterling Secure Proxy:- Version 6.2.0.0, <= 6.2.1.2 is affected.