IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2022-61906)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates important B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities.IBM Sterling B2B Integrator Standard Edition has a SQL injection vulnerability, which stems from the application’s lack of validation of externally entered SQL statements. An attacker could exploit the vulnerability to execute illegal SQL commands to steal sensitive database data.