IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2021-87020)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard Edition in versions 5.2.6.0 to 6.1.1.0 has a SQL injection vulnerability that stems from the application’s lack of validation of externally entered SQL statements. An attacker could use the vulnerability to execute illegal SQL commands to steal sensitive database data.