Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568,...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568,...

Code injection

The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering 1 an error or 2 an exception...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-2983...

Design/Logic Flaw

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors...

Information disclosure

An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-3020, CVE-2013-0568,...

Path traversal

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors...

Design/Logic Flaw

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

CVE-2013-0568

IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2) are affected by an Information Disclosure vulnerability (CVE-2013-0568) described as allowing remote authenticated users to obtain sensitive information about application implementation via uns...

CVE-2012-5936

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2012-5936

Summary (CVE-2012-5936) IBM Sterling B2B Integrator (versions 5.1/5.2) and IBM Sterling File Gateway (2.1/2.2) do not set the secure attribute on session cookies in HTTPS sessions, enabling potential cookie hijacking if captured over HTTP. Affected products/versions (from available docs): IBM Ste...

CVE-2013-0558

CVE-2013-0558 affects IBM Sterling B2B Integrator 5.1/5.2 and IBM Sterling File Gateway 2.1/2.2. The IBM security bulletin documents this as an Information Disclosure vulnerability allowing remote attackers to obtain sensitive information about application implementation via unspecified vectors. ...

CVE-2013-0476

CVE-2013-0476 affects IBM Sterling B2B Integrator (5.1, 5.2) and IBM Sterling File Gateway (2.1, 2.2). The IBM Security Bulletin documents this as a Command Injection vulnerability allowing a remote attacker to inject arbitrary FTP commands via unspecified vectors, potentially compromising the se...

CVE-2013-0560

CVE-2013-0560 : IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (2.2/2.1/2.0) are affected by multiple SQL Injection vulnerabilities. The IBM bulletin describes an authenticated remote attacker who can send specially crafted SQL statements through various screens ...

CVE-2012-5766

CVE-2012-5766 is described in IBM’s Security Bulletin as an SQL injection issue in IBM Sterling B2B Integrator and Sterling File Gateway. The advisory explicitly ties this CVE to improper validation of user-supplied input on select Sterling screens, affecting IBM Sterling B2B Integrator 5.0–5.2 a...

CVE-2013-0456

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...

CVE-2013-0567

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...