IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2021-87024)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities.A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator Standard Edition, which stems from the software’s lack of effective filtering and escaping of parameters in the Web UI. An attacker could exploit the vulnerability to embed arbitrary JavaScript code in the Web UI, which could alter the intended functionality and potentially lead to credential disclosure in trusted sessions.