1374 matches found
CVE-2016-0210
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...
CVE-2016-6020
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...
Open redirect
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...
CVE-2016-6020
CVE-2016-6020 (IBM Sterling B2B Integrator) is an open-redirect/phishing vulnerability in IBM Sterling B2B Integrator Standard Edition. The issue allows a remote attacker to lure a victim to a crafted site and spoof the displayed URL, redirecting to a malicious site and potentially exfiltrating s...
CVE-2016-6020
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...
CVE-2016-5890
IBM Sterling B2B Integrator 5.2 before 502050014 and 5.2 06 before 50206021 allows remote authenticated users to change arbitrary passwords via unspecified vectors...
CVE-2016-5890
IBM Sterling B2B Integrator 5.2 before 502050014 and 5.2 06 before 50206021 allows remote authenticated users to change arbitrary passwords via unspecified vectors...
Code injection
IBM Sterling B2B Integrator 5.2 before 502050014 and 5.2 06 before 50206021 allows remote authenticated users to change arbitrary passwords via unspecified vectors...
CVE-2016-5890
IBM Sterling B2B Integrator 5.2 before 502050014 and 5.2 06 before 50206021 allows remote authenticated users to change arbitrary passwords via unspecified vectors...
CVE-2016-3057
CVE-2016-3057 affects IBM Sterling B2B Integrator 5.2 (pre-5020500_14 and pre-5020602_1). The IBM bulletin confirms a cross-site scripting (XSS) vulnerability in the Web UI that could allow an attacker to inject arbitrary JavaScript/HTML via unspecified vectors, potentially impacting credentials/...
CVE-2016-5890
Consolidated details show CVE-2016-5890 affects IBM Sterling B2B Integrator 5.2 (Standard Edition) prior to 5020500_14 and 5.2 06 prior to 5020602_1. The vulnerability lets an authenticated user change another user’s password via unspecified vectors. The IBM security bulletin confirms the product...
IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2016-03222)
IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions and relationships. A security vulnerability in IBM Sterling B2B Integrator exists when the program uses the HTTP OPTIONS method, allowing a remote attacker to obtain sensitive information by...
CVE-2015-7438
IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...
CVE-2015-7437
Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors...
CVE-2015-7431
Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Design/Logic Flaw
IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...
Cross site scripting
Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-7437
IBM Sterling B2B Integrator Queue Watcher in version 5.2 is affected by an information disclosure vulnerability that allows a local user to obtain sensitive information. The IBM Security Bulletin documents affected products as Sterling Integrator 5.1 and IBM Sterling B2B Integrator 5.2, with a CV...
CVE-2015-7431
CVE-2015-7431 is an XSS vulnerability in IBM Sterling B2B Integrator Queue Watcher (5.2). It results from improper validation of user-supplied input, enabling a remote attacker to craft a URL that injects script into a victim’s browser and potentially steal cookie-based credentials. Affected prod...