CVE-2020-4646

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control...

CVE-2020-4646

CVE-2020-4646 affects IBM Sterling B2B Integrator Standard Edition: 5.2.0.0–5.2.6.5, 6.0.0.0–6.0.3.3, and 6.1.0.0–6.1.0.2. An authenticated user could view pages they should not access due to improper authorization controls. IBM confirms remediation: upgrade to 5.2.6.5_4 (5.2.x), 6.0.3.4 (6.0.x),...

IBM Sterling B2B Integrator 安全漏洞

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...

Security Bulletin: Cross-Site Scripting vulnerability affects IBM Sterling File Gateway (CVE-2020-4658)

Summary IBM Sterling File Gateway has addressed a XSS vulnerability. Vulnerability Details CVEID: CVE-2020-4658 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

IBM Sterling B2B Integrator Elevation of Privilege Vulnerability

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. An elevation of privilege vulnerability exists in IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.52, 6.0.0.0 - 6.0.3.2, 6.1.0.0. The vulnerability stems...

IBM Sterling B2B Integrator Arbitrary Code Execution Vulnerability

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. An arbitrary code execution vulnerability exists in IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.52, 6.0.0.0 - 6.0.3.2, 6.1.0.0. The vulnerability ste...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2021-02004)

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. An information disclosure vulnerability exists in IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.52, 6.0.0.0 - 6.0.3.2, 6.1.0.0. A remote attacker could...

CVE-2019-4728

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this...

CVE-2020-4761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against t...

CVE-2020-4762

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896...

CVE-2019-4728

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this...

Improper access control

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896...

CVE-2020-4762

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896...

CVE-2020-4762

CVE-2020-4762 affects IBM Sterling B2B Integrator: Standard Edition 5.2.0.0–5.2.6.5_2, 6.0.0.0–6.0.3.2, and 6.1.0.0. The issue is an improper access control that could allow an authenticated user to create a privileged account, i.e., elevation of privilege. IBM Security Bulletin confirms the vuln...

CVE-2020-4761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against t...

CVE-2020-4761

CVE-2020-4761 affects IBM Sterling B2B Integrator Standard Edition and multiple releases: 5.2.0.0–5.2.6.5_2, 6.0.0.0–6.0.3.2, and 6.1.0.0. A remote attacker could obtain sensitive information via a detailed technical error message returned in the browser, enabling potential follow-on attacks. Rem...

CVE-2019-4728

Summary: CVE-2019-4728 affects IBM Sterling B2B Integrator Standard Edition and versions 5.2.0.0–5.2.6.5_2, 6.0.0.0–6.0.3.2, and 6.1.0.0, due to deserialization of untrusted data that could allow a remote attacker to execute arbitrary code with SYSTEM privileges. The IBM security bulletin confirm...

CVE-2019-4728

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this...

IBM Sterling B2B Integrator 安全漏洞

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. An elevation of privilege vulnerability exists in IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.52, 6.0.0.0 - 6.0.3.2, 6.1.0.0. The vulnerability stems...

IBM Sterling B2B Integrator 代码问题漏洞

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. An arbitrary code execution vulnerability exists in IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.52, 6.0.0.0 - 6.0.3.2, 6.1.0.0. The vulnerability ste...