Lucene search
+L

2465 matches found

CVE
CVE
added 2016/01/02 9:0 p.m.52 views

CVE-2015-7431

CVE-2015-7431 is an XSS vulnerability in IBM Sterling B2B Integrator Queue Watcher (5.2). It results from improper validation of user-supplied input, enabling a remote attacker to craft a URL that injects script into a victim’s browser and potentially steal cookie-based credentials. Affected prod...

6.1CVSS5.8AI score0.008EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2016/01/02 9:0 p.m.28 views

CVE-2015-7438

IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...

4.3AI score0.0028EPSS
SaveExploits0References2
CVE
CVE
added 2016/01/02 9:0 p.m.52 views

CVE-2015-7437

IBM Sterling B2B Integrator Queue Watcher in version 5.2 is affected by an information disclosure vulnerability that allows a local user to obtain sensitive information. The IBM Security Bulletin documents affected products as Sterling Integrator 5.1 and IBM Sterling B2B Integrator 5.2, with a CV...

5.5CVSS4.9AI score0.00336EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2016/01/02 12:0 a.m.6 views

PT-2016-1113 · Ibm +1 · Ibm Tivoli Common Reporting +7

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions affected versions not specified IBM Tivoli Common Reporting versions affected versions not specified IBM Sterling B2B Integrator versions affected versions not specified IBM Sterling Integrator versio...

10CVSS6.9AI score0.97655EPSS
SaveExploits10References19
NVD
NVD
added 2016/01/01 5:59 a.m.22 views

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

7.4CVSS7AI score0.00871EPSS
SaveExploits0References2
Prion
Prion
added 2016/01/01 5:59 a.m.19 views

Design/Logic Flaw

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

5.8CVSS6.2AI score0.00871EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2016/01/01 2:0 a.m.57 views

CVE-2015-7410

IBM CVE-2015-7410 affects IBM Sterling B2B Integrator 5.2 (Health Check tool). The vulnerability is due to cookies not being properly handled with HTTPS sessions, enabling cookie hijacking via MITM-type scenarios. Affected product/version: IBM Sterling B2B Integrator 5.2. Remediation/fix: apply t...

7.4CVSS6.9AI score0.00871EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2016/01/01 2:0 a.m.25 views

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

7AI score0.00871EPSS
SaveExploits0References2
CNVD
CNVD
added 2015/12/31 12:0 a.m.5 views

IBM Sterling B2B Integrator Security Bypass Vulnerability

IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions and relationships. A security vulnerability exists in IBM Sterling B2B Integrator. An attacker could exploit the vulnerability to conduct a man-in-the-middle attack and obtain sensitive...

7.4CVSS6.5AI score0.00871EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/12/18 12:0 a.m.4 views

IBM Sterling B2B Integrator Local Information Disclosure Vulnerability (CNVD-2015-08354)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A local information disclosure vulnerability exists in IBM Sterling B2B Integrator. A local attacker could exploit the vulnerability to obtain sensitive...

4.7CVSS5.8AI score0.0028EPSS
SaveExploits0References1
seebug.org
seebug.org
added 2015/11/27 12:0 a.m.17 views

IBM Sterling B2B Integrator跨站脚本漏洞(CNVD-2015-07814)

No description provided by source...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2015/11/26 12:0 a.m.5 views

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2015-07814)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A cross-site scripting vulnerability in IBM Sterling B2B Integrator version 5.2 can be exploited by an attacker to steal cookie-based authentication and execute...

6.1CVSS6.6AI score0.008EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/11/26 12:0 a.m.8 views

The vulnerability of the IBM Sterling B2B Integrator, a software tool for automating business processes, allows a perpetrator to read or upload files.

The vulnerability of the IBM Sterling B2B Integrator software for automating business processes is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to read or upload files by using the password-changing mechanism...

5.5CVSS5.9AI score0.00948EPSS
SaveExploits0References3Affected Software1
seebug.org
seebug.org
added 2015/11/16 12:0 a.m.17 views

IBM Sterling B2B Integrator身份验证绕过漏洞

No description provided by source...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2015/11/10 12:0 a.m.5 views

IBM Sterling B2B Integrator Authentication Bypass Vulnerability

IBM Sterling B2B Integrator is IBM's software for integrating critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrator versions 5.1 and...

5.5CVSS5.7AI score0.00948EPSS
SaveExploits0References1
NVD
NVD
added 2015/11/08 10:59 p.m.25 views

CVE-2015-5019

IBM Sterling Integrator 5.1 before 50100048 and Sterling B2B Integrator 5.2 before 50205009 allow remote authenticated users to read or upload files by leveraging a password-change requirement...

5.5CVSS6AI score0.00948EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2015/11/08 10:59 p.m.4 views

CVE-2015-5019

IBM Sterling Integrator 5.1 before 50100048 and Sterling B2B Integrator 5.2 before 50205009 allow remote authenticated users to read or upload files by leveraging a password-change requirement...

5.5CVSS5.6AI score0.00948EPSS
SaveExploits0References3
CVE
CVE
added 2015/11/08 10:0 p.m.67 views

CVE-2015-5019

CVE-2015-5019 affects IBM Sterling Integrator 5.1 (pre-5010004_8) and Sterling B2B Integrator 5.2 (pre-5020500_9). The issue allows remote authenticated users to read or upload files by exploiting a password-change requirement, enabling unauthorized file access within affected components. IBM’s a...

5.5CVSS8.8AI score0.00948EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2015/11/08 10:0 p.m.32 views

CVE-2015-5019

IBM Sterling Integrator 5.1 before 50100048 and Sterling B2B Integrator 5.2 before 50205009 allow remote authenticated users to read or upload files by leveraging a password-change requirement...

9AI score0.00948EPSS
SaveExploits0References2
NVD
NVD
added 2015/10/06 1:59 a.m.26 views

CVE-2015-4992

IBM Sterling B2B Integrator 5.2 before 50205008 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

3.5CVSS6AI score0.00787EPSS
SaveExploits0References2
Rows per page
Query Builder