CVE-2013-0558

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors...

CVE-2012-5936

Summary (CVE-2012-5936) IBM Sterling B2B Integrator (versions 5.1/5.2) and IBM Sterling File Gateway (2.1/2.2) do not set the secure attribute on session cookies in HTTPS sessions, enabling potential cookie hijacking if captured over HTTP. Affected products/versions (from available docs): IBM Ste...

CVE-2012-5766

CVE-2012-5766 is described in IBM’s Security Bulletin as an SQL injection issue in IBM Sterling B2B Integrator and Sterling File Gateway. The advisory explicitly ties this CVE to improper validation of user-supplied input on select Sterling screens, affecting IBM Sterling B2B Integrator 5.0–5.2 a...

CVE-2013-0560

CVE-2013-0560 : IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (2.2/2.1/2.0) are affected by multiple SQL Injection vulnerabilities. The IBM bulletin describes an authenticated remote attacker who can send specially crafted SQL statements through various screens ...

CVE-2013-0468

IBM Sterling CVE-2013-0468 describes a cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1/5.2 and Sterling File Gateway 2.1/2.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, potentially impacting browser conte...

CVE-2013-0468

Cross-site scripting XSS vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-2983...

CVE-2013-0567

CVE-2013-0567 affects IBM Sterling File Gateway (2.2 and 2.1) and is described in IBM’s security bulletin as an Information Disclosure vulnerability in that product. The connected IBM bulletin lists multiple related vulnerabilities and remediation steps (APARs/iFixes) for the affected IBM Sterlin...

CVE-2013-2987

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-3020, CVE-2013-0568,...

CVE-2012-5766

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than...

CVE-2013-0476

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to inject arbitrary FTP commands via unspecified vectors...

CVE-2013-0539

An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack...

CVE-2013-0463

CVE-2013-0463 is an Information Disclosure vulnerability affecting IBM Sterling B2B Integrator 5.0–5.2 and IBM Sterling File Gateway 2.0–2.2. Remote authenticated users could obtain sensitive information about application implementation via unspecified vectors. IBM’s bulletin lists multiple fixes...

CVE-2013-0479

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename...

CVE-2013-2982

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors...

CVE-2013-0481

CVE-2013-0481 affects IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). The issue: errors or exceptions in the console processing may cause stack traces to be displayed in responses, potentially exposing internal implementation details. The CVE is do...

CVE-2013-0456

CVE-2013-0456 affects IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2). The connected IBM Security Bulletin confirms a session hijacking risk via a modified cookie path, describing it as an authenticated remote-access issue. Public details list affected products/versi...

CVE-2013-0568

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

CVE-2013-0560

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766...

CVE-2013-0479

CVE-2013-0479 affects IBM Sterling B2B Integrator (5.2, 5.1, 5.0) and IBM Sterling File Gateway (2.2, 2.1, 2.0); the flaw is File Type/Extension Manipulation due to insufficient validation, allowing remote authenticated users to bypass access restrictions via crafted filenames. Remediation is ava...

CVE-2013-0539

The CVE-2013-0539 entry involves an insufficient Session-ID length in a third-party component used by IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). Root cause: short session identifiers enable brute-force session guessing, allowing potential sess...