CVE-2021-38954

CVE-2021-38954 affects IBM Sterling B2B Integrator Standard Edition. The vulnerability is an information disclosure that allows an attacker to obtain sensitive version information, potentially aiding further attacks. Affected versions are 6.0.0.0–6.0.3.5 and 6.1.0.0–6.1.1.0. IBM provides fixes: u...

Security Bulletin: IBM Sterling B2B Integrator B2B API is vulnerable to information disclosure vulnerability (CVE-2021-38954)

Summary IBM Sterling B2B Integrator has addressed a sensitive version information disclosure vulnerability. Vulnerability Details CVEID:CVE-2021-38954 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could diclose sensitive version information that could aid in future attacks against the...

IBM Sterling B2B Integrator Denial of Service Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities.A denial of service vulnerability exists in IBM Sterling B2B...

CVE-2022-22482

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977...

CVE-2022-22482

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977...

Design/Logic Flaw

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977...

CVE-2022-22482

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.3.5 and 6.1.0.0–6.1.1.0 are affected by CVE-2022-22482 due to insufficient input validation for uploaded files, enabling an authenticated user to upload files that could fill the filesystem and cause a denial of service. CVSS v3.1 ...

CVE-2022-22482

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to permission control vulnerability (CVE-2022-22482)

Summary IBM Sterling B2B Integrator has addressed the vulnerability. Vulnerability Details CVEID:CVE-2022-22482 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. CVSS Base...

Security Bulletin: Permission Control Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4762)

Summary IBM Sterling B2B Integrator has addressed a permission control security vulnerability. Vulnerability Details CVEID:CVE-2020-4762 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to create a privileged account due to improper access controls. CVSS...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4761)

Summary IBM Sterling B2B Integrator has addressed an information disclosure security vulnerability. Vulnerability Details CVEID: CVE-2020-4761 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information when a detailed technical error...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to information disclosure (CVE-2021-39033)

Summary IBM Sterling B2B Integrator is vulnerable to an information disclosure vulnerable that has been addressed. Vulnerability Details CVEID: CVE-2021-39033 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information when a detailed...

Security Bulletin: XSS Security Vulnerabilty Affects Mailbox UI of IBM Sterling B2B Integrator (CVE-2021-20562)

Summary IBM Sterling B2B Integrator has addressed a XSS vulnerability affecting the mailbox UI. Vulnerability Details CVEID: CVE-2021-20562 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip...

Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple vulnerabilities due to Spring Framework

Summary Spring Framework is used by IBM Sterling B2B Integrator. Multiple vulnerabilities in Spring Framework have been addressed. Vulnerability Details CVEID: CVE-2016-9878 DESCRIPTION: Pivotal Spring Framework could allow a remote attacker to traverse directories on the system, caused by the...

Security Bulletin: Multiple Security Vulnerabilities in Spring Framework Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed multiple Spring Framework security vulnerabilites. Vulnerability Details CVEID:CVE-2013-4152 DESCRIPTION: Pivotal Spring Framework could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE error...

Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple vulnerabilities due to CKEditor

Summary CKEditor is used by IBM Sterling B2B Integrator as part of B2B API. Multiple CKEditor vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2021-26272 DESCRIPTION: CKEditor is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in...

Security Bulletin: Information Disclosure Security Vulnerability in WebSphere Application Server Affects IBM Sterling B2B Integrator (CVE-2020-4329)

Summary IBM Sterling B2B Integrator had addressed the security vulnerability Vulnerability Details CVEID:CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive informatio...

Security Bulletin: Multiple Security Vulnerabilities in Jackson-Databind Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed the security vulnerabilites. Vulnerability Details CVEID: CVE-2020-10673 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization in...

Security Bulletin: IBM MQ Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4682)

Summary IBM Sterling B2B Integrator has addressed the security vulnerability from IBM MQ. Vulnerability Details CVEID:CVE-2020-4682 DESCRIPTION: IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserializatio...

Security Bulletin: Cross-Site Scripting Vulnerability Affects the Dashboard User Interface of IBM Sterling B2B Integrator (CVE-2021-20571)

Summary IBM Sterling B2B Integrator has addressed a stored cross-site scriping security vulnerability. Vulnerability Details CVEID: CVE-2021-20571 DESCRIPTION: IBM Sterling B2B Integrator is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript...