CVE-2021-38925

IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171...

CVE-2021-38925

IBM Sterling B2B Integrator Standard Edition vulnerable to CVE-2021-38925 due to weaker cryptographic algorithms that could allow decryption of highly sensitive information. Affected versions: 5.2.0.0–6.0.3.4 and 6.1.0.0–6.1.0.3. Remediation: upgrade to 6.0.3.5 or 6.1.1.0 (per IBM bulletin). No w...

CVE-2021-29903

IBM Sterling B2B Integrator Standard Edition versions 5.2.6.0 through 6.1.1.0 are affected by a SQL injection vulnerability caused by lack of validation of externally entered SQL statements. A remote attacker could exploit this to view, add, modify, or delete data in the backend database. IBM has...

CVE-2021-29903

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 207506...

CVE-2021-29855

IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–6.1.1.0) is affected by a cross-site scripting vulnerability in the Web UI. An attacker could embed arbitrary JavaScript, potentially altering functionality and leading to credential disclosure within a trusted session. CVSS v3.1 base...

CVE-2021-29855

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-29837

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204913...

CVE-2021-29837

CVE-2021-29837 affects IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–6.1.1.0). The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user. Affected products and versions are l...

CVE-2021-29836

The CVE-2021-29836 issue affects IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.1.1.0, where a cross-site scripting vulnerability exists in the Dashboard/Web UI that allows embedding arbitrary JavaScript, potentially enabling credential disclosure within a trusted session...

CVE-2021-29836

IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-29798

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734...

CVE-2021-29798

Summary : CVE-2021-29798 affects IBM Sterling B2B Integrator Standard Edition. Versions 6.0.0.0 through 6.1.1.0 are vulnerable to SQL injection, allowing a remote attacker to view, add, modify, or delete information in the back-end database through crafted SQL statements. The issue is documented ...

CVE-2021-29764

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2021-29761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265...

CVE-2021-29761

CVE-2021-29761 affects IBM Sterling B2B Integrator Standard Edition 5.2.0.0–6.1.1.0. An authenticated user could obtain sensitive information from the dashboard that they should not access (information disclosure). Remediation: upgrade to a fixed version (6.1.1.0 or applicable 6.0.x/6.1.x fixes a...

CVE-2021-29760

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213...

CVE-2021-29760

IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0–6.1.1.0 expose an input validation weakness in the dashboard UI that could allow an authenticated user to download unauthorized files. Connected sources (CNVD/CNNVD and IBM bulletin) describe this as an input validation vulnerability a...

CVE-2021-29758

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169...

Security Bulletin: Access Control Vulnerability Affects IBM Sterling File Gateway (CVE-2021-20376)

Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20376 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. CVSS Base...

Security Bulletin: Cross-Site Scripting Vulnerability Affects IBM Sterling File Gateway (CVE-2021-20481)

Summary IBM Sterling File Gateway has addressed the security vulnerabilty. Vulnerability Details CVEID: CVE-2021-20481 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...