Design/Logic Flaw

IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...

CVE-2015-7437

IBM Sterling B2B Integrator Queue Watcher in version 5.2 is affected by an information disclosure vulnerability that allows a local user to obtain sensitive information. The IBM Security Bulletin documents affected products as Sterling Integrator 5.1 and IBM Sterling B2B Integrator 5.2, with a CV...

CVE-2015-7431

Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-7431

CVE-2015-7431 is an XSS vulnerability in IBM Sterling B2B Integrator Queue Watcher (5.2). It results from improper validation of user-supplied input, enabling a remote attacker to craft a URL that injects script into a victim’s browser and potentially steal cookie-based credentials. Affected prod...

CVE-2015-7437

Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors...

CVE-2015-7438

CVE-2015-7438 affects IBM Sterling B2B Integrator 5.2. It describes a local information-disclosure flaw where a local attacker can obtain sensitive cleartext web-services information by leveraging database access. Documented in NVD/NIST and corroborated by multiple sources (CNVD, CVE lists). The ...

CVE-2015-7438

IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...

PT-2016-1113 · Ibm +1 · Ibm Tivoli Common Reporting +7

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions affected versions not specified IBM Tivoli Common Reporting versions affected versions not specified IBM Sterling B2B Integrator versions affected versions not specified IBM Sterling Integrator versio...

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

Design/Logic Flaw

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-7410

IBM CVE-2015-7410 affects IBM Sterling B2B Integrator 5.2 (Health Check tool). The vulnerability is due to cookies not being properly handled with HTTPS sessions, enabling cookie hijacking via MITM-type scenarios. Affected product/version: IBM Sterling B2B Integrator 5.2. Remediation/fix: apply t...

IBM Sterling B2B Integrator Security Bypass Vulnerability

IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions and relationships. A security vulnerability exists in IBM Sterling B2B Integrator. An attacker could exploit the vulnerability to conduct a man-in-the-middle attack and obtain sensitive...

IBM Sterling B2B Integrator Local Information Disclosure Vulnerability (CNVD-2015-08354)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A local information disclosure vulnerability exists in IBM Sterling B2B Integrator. A local attacker could exploit the vulnerability to obtain sensitive...

IBM Sterling B2B Integrator跨站脚本漏洞（CNVD-2015-07814）

No description provided by source...

The vulnerability of the IBM Sterling B2B Integrator, a software tool for automating business processes, allows a perpetrator to read or upload files.

The vulnerability of the IBM Sterling B2B Integrator software for automating business processes is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to read or upload files by using the password-changing mechanism...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2015-07814)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A cross-site scripting vulnerability in IBM Sterling B2B Integrator version 5.2 can be exploited by an attacker to steal cookie-based authentication and execute...

IBM Sterling B2B Integrator身份验证绕过漏洞

No description provided by source...

IBM Sterling B2B Integrator Authentication Bypass Vulnerability

IBM Sterling B2B Integrator is IBM's software for integrating critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrator versions 5.1 and...

CVE-2015-5019

IBM Sterling Integrator 5.1 before 50100048 and Sterling B2B Integrator 5.2 before 50205009 allow remote authenticated users to read or upload files by leveraging a password-change requirement...