CVE-2019-4728

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this...

CVE-2019-4728

Summary: CVE-2019-4728 affects IBM Sterling B2B Integrator Standard Edition and versions 5.2.0.0–5.2.6.5_2, 6.0.0.0–6.0.3.2, and 6.1.0.0, due to deserialization of untrusted data that could allow a remote attacker to execute arbitrary code with SYSTEM privileges. The IBM security bulletin confirm...

IBM Sterling B2B Integrator 代码问题漏洞

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. An arbitrary code execution vulnerability exists in IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.52, 6.0.0.0 - 6.0.3.2, 6.1.0.0. The vulnerability ste...

IBM Sterling B2B Integrator 安全漏洞

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. An elevation of privilege vulnerability exists in IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.52, 6.0.0.0 - 6.0.3.2, 6.1.0.0. The vulnerability stems...

CVE-2020-4762

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896...

CVE-2020-4761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against t...

CVE-2020-4657

IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2020-4657

IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2020-4657

The IBM Sterling B2B Integrator CVE-2020-4657 affects Standard Edition versions 5.2.0.0 through 6.0.3.2. It is a cross-site scripting vulnerability that lets an attacker embed arbitrary JavaScript in the Web UI, potentially disclosing credentials in a trusted session. Remediation: upgrade to IBM ...

CVE-2020-4657

IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

IBM Sterling B2B Integrator 跨站脚本漏洞

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator Standard Edition suffers from a...

CVE-2019-4738

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753...

CVE-2019-4738

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753...

Design/Logic Flaw

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753...

CVE-2019-4738

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753...

CVE-2019-4738

CVE-2019-4738 affects IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–5.2.6.5 and 6.0.0.0–6.0.3.1). The vulnerability is an information disclosure in the Dashboard UI that leaks sensitive information to authenticated users, enabling potential follow-on attacks. The public documents...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator Dashboard UI (CVE-2019-4738)

Summary IBM Sterling B2B Integrator has addressed the information disclosre security vulnerability in Dashboard UI Vulnerability Details CVEID: CVE-2019-4738 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition discloses sensitive information to an authenticated user from the dashboard UI...

IBM Sterling B2B Integrator 信息泄露漏洞

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

CVE-2020-4937

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 191814...