Lucene search
+L

777 matches found

Positive Technologies
Positive Technologies
added 2025/07/07 12:0 a.m.8 views

PT-2025-28471 · Ibm · Ibm Sterling File Gateway

Name of the Vulnerable Software and Affected Versions: IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue could disclose sensitive installation directory information to an authenticated user, which could be...

4.3CVSS5.8AI score0.00221EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/06/23 8:38 a.m.9 views

CVE-2024-54172

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

4.3CVSS7.2AI score0.00121EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/23 8:38 a.m.10 views

CVE-2024-54183

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall...

5.4CVSS6.5AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/18 5:15 p.m.12 views

CVE-2025-1348

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a suitable caching policy...

4CVSS0.00128EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/18 5:15 p.m.7 views

CVE-2025-1348

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a suitable caching policy...

4CVSS5.8AI score0.00128EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/18 5:15 p.m.10 views

CVE-2024-54172

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

4.3CVSS5.7AI score0.00121EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/18 5:15 p.m.12 views

CVE-2025-1349

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

4.8CVSS5.5AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/18 5:15 p.m.11 views

CVE-2025-1349

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

5.5CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/18 4:20 p.m.34 views

CVE-2025-1349

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0–6.1.2.6 and 6.2.0.0–6.2.0.4 are affected by a stored cross-site scripting (XSS) vulnerability in the Dashboard UI, allowing a privileged user to inject arbitrary JavaScript into the Web UI and potentially disclose credenti...

5.5CVSS5.2AI score0.00175EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/06/18 4:19 p.m.17 views

CVE-2025-1348 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a suitable caching policy...

4CVSS0.00128EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/18 4:15 p.m.13 views

CVE-2024-54183

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall...

5.4CVSS5.4AI score0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/18 4:13 p.m.15 views

CVE-2024-54172 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site request forgery

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

4.3CVSS0.00121EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/18 4:13 p.m.28 views

CVE-2024-54172

CVE-2024-54172 affects IBM Sterling B2B Integrator and IBM Sterling File Gateway, specifically versions 6.0.0.0–6.1.2.6 and 6.2.0.0–6.2.0.4. The vulnerability is a cross-site request forgery (CSRF) flaw that could permit an attacker to perform malicious, unauthorized actions on behalf of a truste...

4.3CVSS4.7AI score0.00121EPSS
SaveExploits0References1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2025/06/18 4:1 p.m.6 views

Security Bulletin: The Mailbox User Interface of IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnearble to XSS (CVE-2024-54183)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway has addressed XSS in the mailbox user interface Vulnerability Details CVEID:CVE-2024-54183 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows an...

5.4CVSS5.2AI score0.00174EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/06/18 3:8 p.m.31 views

CVE-2024-54183

IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to cross-site scripting (CVE-2024-54183) in the web UI for versions 6.0.0.0–6.1.2.6 and 6.2.0.0–6.2.0.4 when accessed by an authenticated user, potentially allowing arbitrary JavaScript and credential disclosure within a tru...

5.4CVSS5.3AI score0.00174EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/06/18 3:8 p.m.17 views

CVE-2024-54183 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall...

5.4CVSS0.00174EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/18 12:0 a.m.7 views

IBM Sterling B2B Integrator和IBM Sterling File Gateway 跨站脚本漏洞

IBM Sterling B2B Integrator and IBM Sterling File Gateway are both products of International Business Machines IBM.IBM Sterling B2B Integrator is a suite of software that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B...

5.4CVSS5.9AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/18 12:0 a.m.12 views

PT-2025-26175 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue allows a local user to obtain sensiti...

4CVSS5.5AI score0.00128EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/06/18 12:0 a.m.7 views

PT-2025-26174 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue is related to cross-site request...

4.3CVSS6.5AI score0.00121EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/18 12:0 a.m.7 views

IBM Sterling B2B Integrator和IBM Sterling File Gateway 安全漏洞

IBM Sterling B2B Integrator and IBM Sterling File Gateway are both products of International Business Machines IBM.IBM Sterling B2B Integrator is a suite of software that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B...

4CVSS6.2AI score0.00128EPSS
SaveExploits0References1
Rows per page
Query Builder