CVE-2013-5411

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors...

CVE-2013-5409

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5406

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters...

Authentication flaw

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation...

Sql injection

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Code injection

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors...

Design/Logic Flaw

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue...

CVE-2013-5411

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors...

CVE-2013-5413

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation...

CVE-2013-5409

IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by SQL Injection. An authenticated remote attacker could send crafted SQL statements to various screens, enabling view/add/modify/delete data in back-end DB. For affected versions, remediation is available: apply Fix P...

CVE-2013-5411

CVE-2013-5411 concerns IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2, where remote attackers can inject links and trigger unintended navigation or actions via unspecified vectors (Link Injection). The IBM security bulletin aggregates this with other vulnerabilities in the same...

CVE-2013-5413

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 are affected by CVE-2013-5413 because logging out does not invalidate the current session, enabling potential authentication bypass on unattended workstations. The IBM bulletin lists remediation for 5.2/2.2 as applying Fix Pack 5020402...

CVE-2013-5405

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 are affected by CVE-2013-5405 (Cross-Site Scripting). The IBM security bulletin lists this and related CVEs, detailing that XSS can be triggered via parameters to inject scripts. Affected versions: B2B Integrator 5.2 and File Gateway 2...

CVE-2013-5406

IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by CVE-2013-5406 (Windows MHTML cross-site scripting). The vulnerability involves XSS via unspecified parameters, enabling a remote attacker to inject script through interactions with the Windows MHTML protocol handler...

CVE-2013-5407

CVE-2013-5407 affects IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 (and older 5.1/2.1 with 2.1). The frame injection vulnerability allows a remote attacker to use crafted web content to bypass access restrictions or access sensitive information by abusing FRAME elements. The ...

CVE-2013-5405

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters...

CVE-2013-5409

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5407

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue...

CVE-2013-3626

Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator VHI 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message...