Security Bulletin: Multiple Apache Struts Vulnerabilities Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator Standard Edition has addressed the following multiple vulnerabilities caused by Apach Struts 1.1 Vulnerability Details CVEID: CVE-2008-2025 DESCRIPTION: Apache Struts is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

Security Bulletin: Information Disclosure Vulnerabilities Affect IBM Sterling B2B Integrator (CVE-2019-4146, CVE-2019-4222)

Summary IBM Sterling B2B Integrator Standard Edition has addressed the information disclosure vulnerabilities Vulnerability Details CVEID: CVE-2019-4146 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive document information under unusu...

Security Bulletin: Web page caching vulnerability affects IBM Sterling B2B Integrator (CVE-2016-5893)

Summary IBM Sterling B2B Integrator Standard Edition allows web pages to be stored locally which can be read by another user on the system. Vulnerability Details CVEID: CVE-2016-5893 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition allows web pages to be stored locally which can be read ...

Security Bulletin: Multiple Security Vulnerabilities in ActiveMQ Affect IBM Sterling B2B Integrator

Summary There are multiple security vulnerabilities in ActiveMQ that affect IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2011-4905 DESCRIPTION: Apache ActiveMQ is vulnerable to a denial of service, caused by an error in the failover mechanism when handling an openwire connection...

Security Bulletin: Multiple Security Vulnerabilities in Apache Axis Affect IBM Sterling B2B Integrator (CVE-2014-3596, CVE-2012-5784)

Summary IBM Sterling B2B Integrator uses ActiveMQ. ActiveMQ uses Axis and is vulnerable. Vulnerability Details CVEID: CVE-2012-5784 DESCRIPTION: Apache Axis 1.4, as used in multiple products, could allow a remote attacker to conduct spoofing attacks, caused by the failure to verify that the serve...

Security Bulletin: IBM Sterling File Gateway is Vulnerable to Cross-site Scripting (CVE-2017-1632)

Summary IBM Sterling File Gateway is vulnerable to cross-site scripting Vulnerability Details CVEID: CVE-2017-1632 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...

Security Bulletin: SQL injection vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1174)

Summary IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Vulnerability Details CVEID: CVE-2017-1174...

Security Bulletin: Cross-site Scripting Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2017-1482)

Summary Cross-site scripting security vulnerability affects IBM Sterling B2B Integrator. Vulnerability Details CVEID: CVE-2017-1482 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i...

Security Bulletin: Multiple access control vulnerabilities affect IBM Sterling B2B Integrator (CVE-2016-9983, CVE-2016-9982)

Summary IBM Sterling B2B Integrator Standard Edition could allow an authenticate user with special privileges to view files and web pages that they should not have access to. Vulnerability Details CVEID: CVE-2016-9983 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an...

Security Bulletin: Security Vulnerability in Apache Commons FileUpload Affects IBM Sterling B2B Integrator (CVE-2016-1000031)

Summary Security vulnerability in Apache Commons FileUpload affects IBM Sterling B2B Integrator. Vulnerability Details CVEID: CVE-2016-1000031 DESCRIPTION: Apache Commons FileUpload, as used in Novell NetIQ Sentinel and other products, could allow a remote attacker to execute arbitrary code on th...

Security Bulletin: Information disclosure vulnerability affects IBM Sterling B2B Integrator  (CVE-2016-0341)

Summary IBM 10x vulnerability in IBM Sterling B2B Integrator could allow a remote attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2016-0341 DESCRIPTION: IBM 10x could allow a malicious user to obtain highly sensitive information due to missing configurations of HTTPS...

Security Bulletin: IBM Sterling B2B Integrator Is Vulnerable to Cross-site Scripting Due to the Vulnerability of 10x (CVE-2016-5892)

Summary IBM Sterling B2B Integrator is vulnerable to cross-site scripting due to the vulnerability of 10x. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality, potentially leading to credentials disclosure within a trusted...

Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2018-1800)

Summary IBM Sterling B2B Integrator Standard Edition has addressed the information disclosure vulnerability Vulnerability Details CVEID: CVE-2018-1800 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a local user to obtain highly sensitive information during a short time peri...

Security Bulletin: IBM Sterling B2B Integrator has Cross Site Scripting vulnerabilities in Queue Watcher (CVE-2015-7431)

Summary IBM Sterling B2B Integrator Queue Watcher could allow Cross Site Scripting attack Vulnerability Details CVEID: CVE-2015-7431 DESCRIPTION: IBM Sterling B2B Integrator is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploi...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to...

Security Bulletin: IBM Sterling B2B Integrator has Cross Site Scripting vulnerabilities in Queue Watcher (CVE-2017-1496)

Summary IBM Sterling B2B Integrator Queue Watcher could allow a Cross Site Scripting attack Vulnerability Details CVEID: CVE-2017-1496 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod...

Security Bulletin: Cross-Site scripting vulnerability affects IBM Sterling B2B Integrator (CVE-2016-3057)

Summary IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. Vulnerability Details CVEID: CVE-2016-3057 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod...

Security Bulletin: Information disclosure vulnerability affects IBM Sterling B2B Integrator (CVE-2016-0385)

Summary IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain unauthorized data. Vulnerability Details CVEID: CVE-2016-0385 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to bypass security restrictions caused by a buffer overflow. This...

Security Bulletin: Multiple Security Vulnerabilities in Jetty Affect IBM Sterling B2B Integrator

Summary There are multiple security vulnerabilities in Jetty that affect IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2017-7658 DESCRIPTION: Eclipse Jetty is vulnerable to HTTP request smuggling, caused by a flaw when handling more than one Content-Length headers. By sending a...

Security Bulletin: IBM Sterling B2B Integrator is Vulnerable to a Robot Security Vulnerability (CVE-2017-6168)

Summary IBM Sterling B2B Integrator is vulnerable to a robot security vulnerability. This could allow an attacker to obtain encrypted data in clear text. Vulnerability Details CVEID: CVE-2017-6168 DESCRIPTION: F5 BIG-IP virtual servers configured with a Client SSL profile could allow a remote...