Oracle Java SE 输入验证错误漏洞

Java SE stands for Java Platform Standard Edition and is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments.Oracle GraalVM Enterprise Edition is an Oracle-based multilingual virtual machine for enterprise Java SE. A denial of servic...

PT-2021-7853

Name of the Vulnerable Software and Affected Versions Java SE versions 7u311, 8u301, 11.0.12, 17 Oracle GraalVM Enterprise Edition versions 20.3.3 and 21.2.0 Description The issue is related to the Swing component in Java SE and Oracle GraalVM Enterprise Edition, allowing an unauthenticated...

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656...

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0–6.1.1.0 are affected by an information-disclosure vulnerability (CVE-2021-29700). An authenticated attacker could obtain sensitive data from configuration files, enabling further attacks. IBM’s bulletin lists remediation: upgrade to 6....

CVE-2021-29903

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 207506...

CVE-2021-29758

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169...

CVE-2021-38925

IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171...

CVE-2021-29761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265...

CVE-2021-38925

IBM Sterling B2B Integrator Standard Edition vulnerable to CVE-2021-38925 due to weaker cryptographic algorithms that could allow decryption of highly sensitive information. Affected versions: 5.2.0.0–6.0.3.4 and 6.1.0.0–6.1.0.3. Remediation: upgrade to 6.0.3.5 or 6.1.1.0 (per IBM bulletin). No w...

CVE-2021-29903

IBM Sterling B2B Integrator Standard Edition versions 5.2.6.0 through 6.1.1.0 are affected by a SQL injection vulnerability caused by lack of validation of externally entered SQL statements. A remote attacker could exploit this to view, add, modify, or delete data in the backend database. IBM has...

CVE-2021-29855

IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–6.1.1.0) is affected by a cross-site scripting vulnerability in the Web UI. An attacker could embed arbitrary JavaScript, potentially altering functionality and leading to credential disclosure within a trusted session. CVSS v3.1 base...

CVE-2021-29836

The CVE-2021-29836 issue affects IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.1.1.0, where a cross-site scripting vulnerability exists in the Dashboard/Web UI that allows embedding arbitrary JavaScript, potentially enabling credential disclosure within a trusted session...

CVE-2021-29798

Summary : CVE-2021-29798 affects IBM Sterling B2B Integrator Standard Edition. Versions 6.0.0.0 through 6.1.1.0 are vulnerable to SQL injection, allowing a remote attacker to view, add, modify, or delete information in the back-end database through crafted SQL statements. The issue is documented ...

CVE-2021-29760

IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0–6.1.1.0 expose an input validation weakness in the dashboard UI that could allow an authenticated user to download unauthorized files. Connected sources (CNVD/CNNVD and IBM bulletin) describe this as an input validation vulnerability a...

CVE-2021-29758

CVE-2021-29758 affects IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.1.1.0, where an authenticated user can perform actions they should not access due to improper access controls (authorization issue). The IBM bulletin/wide references indicate a base CVSS around 4.3 (MED...

IBM Sterling B2B Integrator 跨站脚本漏洞

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

CVE-2021-38925

IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171...

CVE-2021-29836

IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

IBM Sterling B2B Integrator SQL注入漏洞

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard Edition in versions...

CVE-2021-29798

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734...