CVE-2021-20485

IBM Sterling File Gateway versions 2.2.0.0–6.1.0.3 are affected by a information-disclosure vulnerability (CVE-2021-20485). A remote attacker can obtain sensitive information when a detailed technical error message is returned in the browser, enabling potential follow-on attacks. The IBM bulletin...

CVE-2021-20484

CVE-2021-20484 affects IBM Sterling File Gateway (and related Sterling B2B Integrator components) with a cross-site scripting vulnerability in the Web UI. According to IBM’s security bulletin, versions 2.2.0.0 through 6.1.0.3 are affected; exploitation could allow an attacker to embed arbitrary J...

CVE-2021-20484

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

IBM Sterling File Gateway 信息泄露漏洞

IBM Sterling File Gateway, an application for transferring files between internal and external partners, allows you to more securely and reliably transfer files with trading partners. IBM Sterling File Gateway version 2.2.0.0-6.1.0.3 is vulnerable to an information disclosure vulnerability. An...

Security Bulletin: Cross-Site Scripting Vulnerability Affects IBM Sterling File Gateway (CVE-2021-20484)

Summary IBM Sterling File Gateway has addressed the security vulnerabilty. Vulnerability Details CVEID: CVE-2021-20484 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI...

Security Bulletin: Information Disclosure Vulnerabilities Affect IBM Sterling B2B File Gateway User Interface (CVE-2021-20485, CVE-2021-20563)

Summary IBM Sterling B2B File Gateway has addressed the security vulnerabilities. Vulnerability Details CVEID: CVE-2021-20485 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. Th...

CVE-2021-20485

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 197667...

CVE-2021-20563

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepath on the server which could be used in further attacks against the system. IBM X-Force ID: 19923...

IBM Sterling File Gateway 信息泄露漏洞

IBM Sterling File Gateway is a suite of file transfer software from IBM Corporation. The software integrates different file transfer activity centers and helps file-based data to be securely exchanged over the Internet.An information disclosure vulnerability exists in IBM Sterling File Gateway,...

CVE-2021-20484

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

Security Bulletin: Apache CXF Vulnerability Affects IBM Global Mailbox (CVE-2021-22696)

Summary Security vulnerability have been Identified In Apache CXF library shipped with IBM Global Mailbox. Vulnerability Details CVEID: CVE-2021-22696 DESCRIPTION: Apache CXF is vulnerable to a denial of service, caused by improper validation of requesturi parameter by the OAuth 2 authorization...

Security Bulletin: Cross-Site Scripting vulnerability affects IBM Sterling File Gateway (CVE-2020-4658)

Summary IBM Sterling File Gateway has addressed a XSS vulnerability. Vulnerability Details CVEID: CVE-2020-4658 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

CVE-2020-4658

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

CVE-2020-4658

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

Cross site scripting

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

CVE-2020-4658

CVE-2020-4658 affects IBM Sterling File Gateway, versions 2.2.0.0 through 6.0.3.2, which are vulnerable to cross-site scripting via the Web UI. The root issue is executing arbitrary JavaScript in the UI, potentially leading to credentials disclosure within a trusted session. IBM’s security bullet...

CVE-2020-4658

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

IBM Sterling File Gateway Cross-Site Scripting Vulnerability (CNVD-2020-73179)

IBM Sterling File Gateway is a centralized management gateway product for file transfers from IBM USA. A cross-site scripting vulnerability exists in IBM Sterling File Gateway 2.2.0.0 - 6.0.3.2. An attacker can exploit the vulnerability by embedding arbitrary JavaScript code in the Web UI that ca...

IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2020-64001)

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A security vulnerability exists in IBM Sterling File Gateway,...

IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2020-63969)

IBM Sterling File Gateway is an application for transferring files between internal and external partners, allowing you to transfer files more securely and reliably with trading partners. An information disclosure vulnerability exists in IBM Sterling File Gateway 6.0.0.0 - 6.0.3.2, 2.2.0.0 -...