CVE-2017-1132

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2017-1347

CVE-2017-1347 affects IBM Sterling B2B Integrator Standard Edition 5.2 and is a SQL injection vulnerability enabling a remote attacker to view, add, modify, or delete data in the back-end DB. IBM bulletin details the product and remediation paths: upgrade to IBM Sterling B2B Integrator 5.2 with f...

CVE-2017-1193

IBM Sterling B2B Integrator Standard Edition 5.2 is affected by CVE-2017-1193, enabling a user to obtain sensitive information through an HTTP GET request due to improper access controls. The IBM Security Bulletin for CVE-2017-1193 (and related CVE-2017-1302) lists 5.2.6/5.2.x as affected and pro...

CVE-2017-1349

IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local user. IBM X-Force ID: 126525...

CVE-2017-1348

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2017-1347

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126462...

CVE-2017-1302

Summary (CVE-2017-1302) : IBM Sterling B2B Integrator Standard Edition (Version 5.2) could allow a local user to view sensitive information due to improper access controls . The root cause is an access control weakness that permits viewing of sensitive data locally. The IBM security bulletin note...

CVE-2017-1193

IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request. IBM X-Force ID: 123667...

CVE-2017-1349

CVE-2017-1349 affects IBM Sterling B2B Integrator Standard Edition 5.2, where HTTP sessions can disclose potentially sensitive information to a local user. The IBM Security Bulletin details the vulnerability as an information-disclosure flaw in the 5.2 release, with a remediation path: apply the ...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2017-11308)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...

Code injection

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...

CVE-2016-9983

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...

CVE-2016-9982

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274...

Improper access control

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274...

CVE-2016-9983

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...

CVE-2016-9982

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274...

CVE-2016-9983

Summary: CVE-2016-9983 affects IBM Sterling B2B Integrator Standard Edition 5.2. An authenticated user with special privileges could view files they should not have access to, indicating an access-control weakness leading to information disclosure. The IBM bulletin for this CVE groups it with CVE...

Information disclosure

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...

CVE-2016-0210

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...

CVE-2016-0210

CVE-2016-0210 affects IBM Sterling B2B Integrator Standard Edition. A remote attacker could obtain sensitive information by abusing the HTTP OPTIONS method, causing disclosure in HTTP responses. Affected: Sterling B2B Integrator 5.1 and 5.2. Remediation: apply Fix Pack 5105 for 5.1 or Generic Int...