Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-82419
HistoryOct 11, 2021 - 12:00 a.m.

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2021-82419)

2021-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
ibm sterling b2b integrator
cross-site scripting
vulnerability
web ui
credential disclosure

EPSS

0.001

Percentile

19.6%

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs.A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator versions 5.2.0.0-6.0.3.4, 6.1.0.0- 6.1.0.3. An attacker could exploit the vulnerability to embed arbitrary JavaScript code in the Web UI, which could alter the intended functionality, which could lead to credential disclosure in a trusted session.

EPSS

0.001

Percentile

19.6%

Related for CNVD-2021-82419