Code injection

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a user or group with administrative privileges. IBM X-Force ID: 187077...

Information disclosure

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force ID: 186780...

CVE-2020-4705

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2020-4705

CVE-2020-4705 affects IBM Sterling B2B Integrator (Standard Edition) 5.2.0.0–5.2.6.5 and 6.0.0.0–6.0.3.2. The vulnerability is a cross-site scripting (XSS) flaw in the Web UI that can allow an attacker to embed arbitrary JavaScript, potentially enabling credential disclosure within a trusted sess...

CVE-2020-4700

CVE-2020-4700 affects IBM Sterling B2B Integrator Standard Edition: versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5 allow an authenticated user from a specific group to create users or groups with administrative privileges due to a permission-control vulnerability. IBM’s bulletin provides remediatio...

CVE-2020-4700

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a user or group with administrative privileges. IBM X-Force ID: 187077...

CVE-2020-4692

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force ID: 186780...

CVE-2020-4692

CVE-2020-4692 affects IBM Sterling B2B Integrator Standard Edition: 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. It is a path traversal vulnerability that could allow an authenticated user to obtain sensitive information from the Dashboard UI. Remediation: upgrade to 5.2.6.5_3, 6.0.3.3, or 6.1.0.0 (per I...

CVE-2020-4671

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284...

CVE-2020-4671

CVE-2020-4671 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. The issue is an information disclosure where potentially sensitive data can be read from log files by an authenticated user. IBM’s Security Bulletin details the affected versions and p...

CVE-2020-4655

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...

CVE-2020-4655

The CVE affects IBM Sterling B2B Integrator Standard Edition, specifically versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. The underlying issue is SQL injection that could let a remote attacker view, add, modify, or delete data in the back-end database. IBM’s security bulletin lists remediation by ...

CVE-2020-4475

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2020-4566

IBM Sterling B2B Integrator External/Backend B2B API logs may expose highly sensitive information to authenticated users. Affects Standard Edition 5.2.6.0–5.2.6.5 and 6.0.0.0–6.0.3.2. Root cause is information disclosure via log files; remediation: upgrade to 5.2.6.5_3, 6.0.3.3, or 6.1.0.0 (per I...

CVE-2020-4566

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083...

CVE-2020-4475

CVE-2020-4475 affects IBM Sterling B2B Integrator Standard Edition. A remote attacker could obtain sensitive information via a detailed technical error message returned in the browser, enabling further attacks. Affected versions: 5.2.0.0–5.2.6.5 and 6.0.0.0–6.0.3.2. Remediation: update to 5.2.6.5...

IBM Sterling B2B Integrator Path Traversal Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A path traversal vulnerability exists in IBM Sterling B2B...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2020-63942)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffers from a SQL injection...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2020-63977)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

Security Bulletin: XSS Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4705)

Summary IBM Sterling B2B Integrator has addressed an XSS vulnerability. Vulnerability Details CVEID: CVE-2020-4705 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...