CVE-2020-4692

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force ID: 186780...

CVE-2020-4671

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284...

CVE-2020-4671

CVE-2020-4671 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. The issue is an information disclosure where potentially sensitive data can be read from log files by an authenticated user. IBM’s Security Bulletin details the affected versions and p...

CVE-2020-4655

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...

CVE-2020-4475

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2020-4566

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083...

CVE-2020-4566

IBM Sterling B2B Integrator External/Backend B2B API logs may expose highly sensitive information to authenticated users. Affects Standard Edition 5.2.6.0–5.2.6.5 and 6.0.0.0–6.0.3.2. Root cause is information disclosure via log files; remediation: upgrade to 5.2.6.5_3, 6.0.3.3, or 6.1.0.0 (per I...

CVE-2020-4475

CVE-2020-4475 affects IBM Sterling B2B Integrator Standard Edition. A remote attacker could obtain sensitive information via a detailed technical error message returned in the browser, enabling further attacks. Affected versions: 5.2.0.0–5.2.6.5 and 6.0.0.0–6.0.3.2. Remediation: update to 5.2.6.5...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2020-63977)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

Security Bulletin: XSS Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4705)

Summary IBM Sterling B2B Integrator has addressed an XSS vulnerability. Vulnerability Details CVEID: CVE-2020-4705 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

Security Bulletin: Path Traversal Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4692)

Summary IBM Sterling B2B Integrator has addressed a path traversal vulnerability. Vulnerability Details CVEID: CVE-2020-4692 DESCRIPTION: IBM Sterling B2B Integrator could allow an authenticated user to obtain sensitive information from the Dashboard UI. CVSS Base score: 4.3 CVSS Temporal Score:...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4671)

Summary IBM Sterling B2B Integrator has addressed an information disclosure vulnerability. Vulnerability Details CVEID: CVE-2020-4671 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information in log files that could be read by an authenticatedl user. CVSS...

Security Bulletin: SQL Injection Vulnerability Affects EBICS in IBM Sterling B2B Integrator (CVE-2020-4655)

Summary IBM Sterling B2B Integrator has addressed the SQL injection vulnerability in EBICS. Vulnerability Details CVEID: CVE-2020-4655 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which cou...

Security Bulletin: SQL Injection Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4647)

Summary IBM Sterling File Gateway has addressed a SQL injection vulnerability. Vulnerability Details CVEID: CVE-2020-4647 DESCRIPTION: IBM Sterling File Gateway is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view,...

Security Bulletin: Permisson Control Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4700)

Summary IBM Sterling B2B Integrator has addressed a permisson control vulnerability. Vulnerability Details CVEID: CVE-2020-4700 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user belonging to a specific user group to create a user or group with...

Security Bulletin: B2B API Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4566)

Summary IBM Sterling B2B Integrator has addressed an information disclosure vulnerability found within the B2B API. Vulnerability Details CVEID: CVE-2020-4566 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially highly sensitive information in log files that could be read ...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4476)

Summary IBM Sterling File Gateway has addressed a information dislcoure vulnerability. Vulnerability Details CVEID: CVE-2020-4476 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser...

Security Bulletin: Information Disclosure Vulnerability Affects EBICS Client of IBM Sterling B2B Integrator (CVE-2020-4475)

Summary IBM Sterling B2B Integrator has addressed the information disclosure vulnerability affecting EBICS Client. Vulnerability Details CVEID: CVE-2020-4475 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information when a detailed...

Security Bulletin: CKEditor XSS Vulnerability Affects IBM Sterling B2B Integrator (CVE-2018-17960)

Summary IBM Sterling B2B Integrator has addressed XSS vulnerability from CKEditor. Vulnerability Details CVEID: CVE-2018-17960 DESCRIPTION: CKEditor is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability usin...

Security Bulletin: Multiple Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed multiple security vulnerabilities from Bouncy Castle. Vulnerability Details CVEID: CVE-2016-1000338 DESCRIPTION: Bouncy Castle JCE Provider could provide weaker than expected security, caused by improper validation of ASN.1 encoding of signature i...