CVE-2019-4146

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to obtain sensitive document information under unusual circumstances. IBM X-Force ID: 158401...

CVE-2019-4074

CVE-2019-4074 involves IBM Sterling B2B Integrator Standard Edition, with vulnerable versions 6.0.0.0–6.0.0.1. The issue is cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript, potentially leaking credentials in a trusted session. Connected sources (IBM security bul...

CVE-2019-4222

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to view process definition of a business process without permission. IBM X-Force ID: 159231...

CVE-2019-4077

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4076

CVE-2019-4076 affects IBM Sterling B2B Integrator Standard Edition. The vulnerability is a cross-site scripting (XSS) issue in the Web UI that could allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected products/versions...

CVE-2019-4073

IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.0.0.1) is affected by a cross-site scripting vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Connected advisories/records confirm the is...

CVE-2018-1720

CVE-2018-1720 affects IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1. Root cause: use of weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Impact (as stated): partial confidentiality loss; no ...

CVE-2018-1720

IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.36, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 147294...

CVE-2019-4073

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4074

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4077

CVE-2019-4077 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1. Description: cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript and potentially lead to credentials disclosure within a trusted session. Root cause indicated by sources is ...

CVE-2019-4146

CVE-2019-4146 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1 . The vulnerability is an information disclosure that could allow an authenticated user to obtain sensitive document information under unusual circumstances. The IBM security bulletin for this CVE (and CVE...

CVE-2019-4148

IBM Sterling B2B Integrator Standard Edition CVE-2019-4148 is a cross‑site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected versions span IBM Sterling B2B Integrator Standard Editi...

CVE-2019-4076

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4075

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4148

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4222

IBM Sterling B2B Integrator Standard Edition 6.0.0.0–6.0.0.1 is affected by CVE-2019-4222, allowing an authenticated user to view the process definition of a business process without permission. The issue is an information disclosure vulnerability rooted in insufficient access control for process...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2019-12464)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates B2B processes, transactions and relationships. An information disclosure vulnerability exists in IBM Sterling B2B Integrator versions 6.0.0.0 through 6.0.0.1, which can be exploited by an unauthorized attacker to obta...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-14591)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in BM Sterling B2...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-14610)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...