CVE-2013-0455

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2983

CVE-2013-2983 is an XSS vulnerability affecting IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). The cross-site scripting flaw could allow a remote authenticated user to inject arbitrary web script or HTML via unspecified vectors. The connected IBM ...

PT-2013-2350

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2.4 IBM Sterling File Gateway affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject...

PT-2013-4078

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2 IBM Sterling B2B Integrator version 2.2 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For IBM Sterling File Gateway...

CVE-2013-2983: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling File Gateway 2.2 and Sterling B2B Integrator allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2013-0468...

CVE-2013-0455: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5937

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

Code injection

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2012-5937

The CVE-2012-5937 issue affects IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0/5.1, and Sterling B2B Integrator 5.2, as used with IBM Sterling File Gateway 1.1–2.2. The CLA2 server contains an unspecified vulnerability that permits an unauthenticated attacker to execute arbitrary OS c...

PT-2013-1850

Name of the Vulnerable Software and Affected Versions IBM Gentran Integration Suite version 4.3 Sterling Integrator versions 5.0 through 5.1 Sterling B2B Integrator version 5.2 IBM Sterling File Gateway versions 1.1 through 2.2 Description The issue allows remote attackers to execute arbitrary...

CVE-2012-5937: Undefined Security Weakness

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2013-0108

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

CVE-2013-0108: Improper Control of Generation of Code

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

PT-2013-2102

Name of the Vulnerable Software and Affected Versions Honeywell Enterprise Buildings Integrator versions R310, R400.2, R410.1, R410.2 SymmetrE versions R310, R410.1, R410.2 ComfortPoint Open Manager Station version R100 HMIWeb Browser client packages affected versions not specified Description Th...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

CVE-2012-5913

The CVE-2012-5913 vulnerability affects the WordPress Integrator plugin (version 1.32) for WordPress, specifically the wp-integrator.php file. The issue is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the redirect_to parameter to wp-login.php....

CVE-2012-5913

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

CVE-2012-5913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

PT-2012-6194

Name of the Vulnerable Software and Affected Versions WordPress Integrator module version 1.32 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the redirect to parameter to "wp-login.php". Recommendations For WordPress Integrator modu...

CVE-2012-1653

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...