Security Bulletin: Path Traversal Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4692)

Summary IBM Sterling B2B Integrator has addressed a path traversal vulnerability. Vulnerability Details CVEID: CVE-2020-4692 DESCRIPTION: IBM Sterling B2B Integrator could allow an authenticated user to obtain sensitive information from the Dashboard UI. CVSS Base score: 4.3 CVSS Temporal Score:...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4671)

Summary IBM Sterling B2B Integrator has addressed an information disclosure vulnerability. Vulnerability Details CVEID: CVE-2020-4671 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information in log files that could be read by an authenticatedl user. CVSS...

Security Bulletin: SQL Injection Vulnerability Affects EBICS in IBM Sterling B2B Integrator (CVE-2020-4655)

Summary IBM Sterling B2B Integrator has addressed the SQL injection vulnerability in EBICS. Vulnerability Details CVEID: CVE-2020-4655 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which cou...

Security Bulletin: SQL Injection Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4647)

Summary IBM Sterling File Gateway has addressed a SQL injection vulnerability. Vulnerability Details CVEID: CVE-2020-4647 DESCRIPTION: IBM Sterling File Gateway is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view,...

Security Bulletin: Permisson Control Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4700)

Summary IBM Sterling B2B Integrator has addressed a permisson control vulnerability. Vulnerability Details CVEID: CVE-2020-4700 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user belonging to a specific user group to create a user or group with...

Security Bulletin: B2B API Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4566)

Summary IBM Sterling B2B Integrator has addressed an information disclosure vulnerability found within the B2B API. Vulnerability Details CVEID: CVE-2020-4566 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially highly sensitive information in log files that could be read ...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4476)

Summary IBM Sterling File Gateway has addressed a information dislcoure vulnerability. Vulnerability Details CVEID: CVE-2020-4476 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser...

Security Bulletin: Information Disclosure Vulnerability Affects EBICS Client of IBM Sterling B2B Integrator (CVE-2020-4475)

Summary IBM Sterling B2B Integrator has addressed the information disclosure vulnerability affecting EBICS Client. Vulnerability Details CVEID: CVE-2020-4475 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information when a detailed...

Security Bulletin: CKEditor XSS Vulnerability Affects IBM Sterling B2B Integrator (CVE-2018-17960)

Summary IBM Sterling B2B Integrator has addressed XSS vulnerability from CKEditor. Vulnerability Details CVEID: CVE-2018-17960 DESCRIPTION: CKEditor is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability usin...

Security Bulletin: Multiple Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed multiple security vulnerabilities from Bouncy Castle. Vulnerability Details CVEID: CVE-2016-1000338 DESCRIPTION: Bouncy Castle JCE Provider could provide weaker than expected security, caused by improper validation of ASN.1 encoding of signature i...

Security Bulletin: Dom4j XML Injection Vulnerability Affects IBM Sterling B2B Integrator (CVE-2018-1000632)

Summary IBM Sterling B2B Integrator has addressed a Dom4j XML injection vulnerability. Vulnerability Details CVEID: CVE-2018-1000632 DESCRIPTION: dom4j could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation in multiple methods. By sending a...

WSO2 Enterprise Integrator Cross-Site Scripting Vulnerability

WSO2 Enterprise Integrator EI is a comprehensive integration solution that supports communication between a variety of different applications. A stored cross-site scripting vulnerability exists in the BPMN Explorer in WSO2 Enterprise Integrator 6.6.0 and earlier versions. No detailed vulnerabilit...

CVE-2020-25516

WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting XSS vulnerability in BPMN explorer tasks...

CVE-2020-25516

WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting XSS vulnerability in BPMN explorer tasks...

Cross site scripting

WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting XSS vulnerability in BPMN explorer tasks...

CVE-2020-25516

CVE-2020-25516 affects WSO2 Enterprise Integrator 6.6.0 and earlier, with a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks. The linked CVE entries confirm the issue and describe the affected product (WSO2 EI), the vulnerable component (BPMN explorer tasks) and the root cau...

CVE-2020-25516

WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting XSS vulnerability in BPMN explorer tasks...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2020-59703)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffers from a SQL injection...

CVE-2020-4564

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2020-4564

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...