2558 matches found
CVE-2019-4680
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171733...
Sql injection
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171733...
Cross site scripting
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2020-4564
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2020-4564
CVE-2020-4564 affects IBM Sterling B2B Integrator Standard Edition (5.2.0.0–6.0.3.1) and IBM Sterling File Gateway (2.2.0.0–6.0.3.1). The vulnerability is a cross-site scripting flaw in the Web UI that allows an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosur...
CVE-2019-4680
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171733...
CVE-2019-4680
CVE-2019-4680 affects IBM Sterling B2B Integrator (Standard Edition) 5.2.0.0–6.0.2.2 via the Graphic Process Modeler, enabling SQL injection that could allow an attacker to view, add, modify, or delete data in the back-end database. The IBM Security bulletin confirms the vulnerability and provide...
b2b-plus.at Cross Site Scripting vulnerability OBB-1429148
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-4564: Improper Neutralization of Input During Web Page Generation
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
PT-2020-11021
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.0.2.2 Description The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the...
IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting Vulnerabilities
IBM Sterling B2B Integrator and others are products of IBM Corporation in the U.S.A. IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions, and relationships.IBM Sterling File Gateway is a suite of file transfer software.IBM Sterling File Gateway...
CVE-2019-4680: Improper Neutralization of Special Elements used in an SQL Command
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171733...
PT-2020-18133
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.0.3.1 IBM Sterling File Gateway versions 2.2.0.0 through 6.0.3.1 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intende...
Security Bulletin: Cross-Site Scripting Security Vulnerability Affects IBM Sterling B2B Integrator Standard Edition ( CVE-2020-4564)
Summary IBM Sterling B2B Integrator Standard Edition has addressed XSS security vulnerability. Vulnerability Details CVEID: CVE-2020-4564 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition and IBM Sterling File Gateway are vulnerable to cross-site scripting. This vulnerability allows users...
Security Bulletin: SQL Injection Vulnerability Affects the Graphic Process Modeler in IBM Sterling B2B Integrator (CVE-2019-4680)
Summary IBM Sterling B2B Integrator has addressed SQL injection security vulnerability in the Graphic Process Modeler. Vulnerability Details CVEID: CVE-2019-4680 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially-crafte...
genera2012.b2b-match.com Cross Site Scripting vulnerability OBB-1422321
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-4564
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
b2b-plus.at Cross Site Scripting vulnerability OBB-1408153
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
b2b-carmarket.com Cross Site Scripting vulnerability OBB-1305577
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
File Upload Vulnerability After Destoon B2B Content Management System
DESTOON® B2B Website Management System is an open source B2B e-commerce industry portal solution based on PHP+MySQL. A file upload vulnerability exists after the Destoon B2B content management system, which can be exploited by attackers to gain server administrative privileges...