1374 matches found
CVE-2017-1481
CVE-2017-1481 affects IBM Sterling B2B Integrator Standard Edition 5.2. The IBM Security Bulletin confirms an information-disclosure vulnerability where a user can view sensitive information belonging to another user. The CVSS base score is low-to-moderate (3.1 base on the IBM bulletin, with CVSS...
CVE-2017-1482
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting via the Web UI, allowing injection of arbitrary JavaScript and potentially credential disclosure in a trusted session. Root cause: insufficient input filtering in the Web UI. Affected product/version: IBM Sterl...
CVE-2017-1174
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...
Sql injection
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...
CVE-2017-1174
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...
Xxe
IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...
CVE-2017-1192
IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...
CVE-2017-1174
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...
CVE-2017-1192
IBM Sterling B2B Integrator 5.2 is affected by CVE-2017-1192 (XML External Entity Injection) when processing XML data. A remote attacker could exfiltrate sensitive information or exhaust memory/resources. IBM’s bulletin specifies remediation: apply the 5.2 fix packs IT19755 or 5020603_2/5020602_4...
CVE-2017-1192
IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...
Xxe
XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...
CVE-2015-0194
XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...
CVE-2015-0194
CVE-2015-0194 affects IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2). The underlying issue is an XML External Entity (XXE) processing vulnerability in these products’ XML handling, allowing a remote attacker to read arbitrary files by suppl...
CVE-2017-1496
IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...
Cross site scripting
IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...
CVE-2017-1496
CVE-2017-1496 affects IBM Sterling B2B Integrator Standard Edition (5.2.x). A cross-site scripting vulnerability exists in the Queue Watcher component that allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credential disclosure within a trusted session. The...
CVE-2017-1496
IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...
Cross site scripting
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
CVE-2017-1132
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...