IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2021-82419)

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs.A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator versions 5.2.0.0-6.0.3.4, 6.1.0.0- 6.1.0.3. An attacker could exploit the...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2021-82421)

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs.A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator versions 5.2.0.0-6.0.3.4, 6.1.0.0-6.1.0.3. An attacker could exploit the...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2021-82418)

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs.IBM Sterling B2B Integrator versions 6.0.0.0-6.0.3.4, 6.1.0.0-6.1.0.3 are vulnerable to SQL injection. An attacker could exploit the vulnerability by...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2021-87016)

IBM Sterling B2B Integrator is a suite of software from IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard Edition has a cross-site...

IBM Sterling B2B Integrator Weak Encryption Algorithm Vulnerability (CNVD-2021-82422)

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. IBM Sterling B2B Integrator versions 5.2.0.0-6.0.3.4, 6.1.0.0-6.1.0.3 are vulnerable to a weak encryption algorithm. An attacker could exploit the...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2021-87020)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard Edition in versions...

IBM Sterling B2B Integrator Input Validation Error Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard Edition prior to...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2021-88192)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2021-78440)

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. IBM Sterling B2B Integrator versions 5.2.0.0-5.2.6.54, 6.0.0.0-6.0.0.6, 6.0.1.0-6.0. 3.4, and 6.1.0.0-6.1.0.3 versions are vulnerable to information...

Security Bulletin: Access Control Vulnerability Affects the User Interface of IBM Sterling File Gateway (CVE-2020-4654)

Summary IBM Sterling File Gateway has addressed the access control security vulnerability. Vulnerability Details CVEID: CVE-2020-4654 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated user to obtain sensitive information due to improper permission control. CVSS Base score: 3.1...

CVE-2021-20571

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656...

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656...

Information disclosure

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656...

Cross site scripting

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656...

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0–6.1.1.0 are affected by an information-disclosure vulnerability (CVE-2021-29700). An authenticated attacker could obtain sensitive data from configuration files, enabling further attacks. IBM’s bulletin lists remediation: upgrade to 6....

CVE-2021-20571

The CVE-2021-20571 entry affects IBM Sterling B2B Integrator 5.2.0.0–6.1.1.0 and describes a stored cross-site scripting vulnerability in the Web UI that can embed arbitrary JavaScript to alter functionality and potentially disclose session credentials. Remediation guidance from IBM lists fixed v...

CVE-2021-20571

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Security Bulletin: Access Control Vulnerability Affects IBM Sterlng File Gateway (CVE-2021-20372)

Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20372 DESCRIPTION: IBM Sterling File Gateway could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. CVSS Base...