Security Bulletin: Multiple Cross-Site Scripting Vulnerabilities Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator Standard Edition has addressed the cross-site scripting vulnerabilities Vulnerability Details CVEID: CVE-2019-4073 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar...

Security Bulletin: Sensitive data protection vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1349)

Summary IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information from HTTP sessions that could be read by a local user. Vulnerability Details CVEID: CVE-2017-1349 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information from...

Security Bulletin: Cross-site Scripting Vulnerability Affects IBM Sterling B2B Integrator Standard Edition (CVE-2018-1563, CVE-2018-1513)

Summary IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. Vulnerability Details CVEID: CVE-2018-1563 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod...

Security Bulletin: Information disclosure vulnerability affects IBM Sterling B2B Integrator (CVE-2016-0385)

Summary IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain unauthorized data. Vulnerability Details CVEID: CVE-2016-0385 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to bypass security restrictions caused by a buffer overflow. This...

Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2018-1679, CVE-2018-1564, CVE-2017-1633)

Summary Security Bulletin: Information disclosure security vulnerability affects IBM Sterling B2B Integrator. Vulnerability Details CVEID: CVE-2018-1679 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an unauthenticated user to obtain sensitive information that could be used...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2179 DESCRIPTION: OpenSSL is vulnerable to a denial of service. By sending...

Security Bulletin: Multiple Security Vulnerabilities in Apache Geronimo Affect IBM Sterling B2B Integrator

Summary Multiple Security Vulnerabilities in Apache Geronimo Affect IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2008-0732 DESCRIPTION: Apache Geronimo could allow a local attacker to obtain sensitive information, caused by the init script following symlinks during a chown...

Security Bulletin: IBM B2B Advanced Communications is vulnerable to cross-site scripting due to the vulnerability of 10x (CVE-2016-5892)

Summary IBM B2B Advanced Communications is vulnerable to cross-site scripting due to the vulnerability of 10x. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality, potentially leading to credentials disclosure within a trusted...

Security Bulletin: SQL injection vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1174)

Summary IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Vulnerability Details CVEID: CVE-2017-1174...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator (CVE-2017-3730, CVE-2017-3732, CVE-2016-7055, CVE-2016-8610)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-3730 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a...

Security Bulletin: Vulnerability in Apache Commons BeanUtils Affects IBM Sterling B2B Integrator (CVE-2014-0114)

Summary Apache Commons BeanUtils with Struts 1 does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter. Vulnerability Details CVEID: CVE-2014-0114 DESCRIPTION: Apache Struts could allow a remote attacke...

Security Bulletin: HTTP verb tampering vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1131)

Summary IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. Vulnerability Details CVEID: CVE-2017-1131 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an...

Security Bulletin: Cross-site Scripting Vulnerability Affects IBM Sterling B2B Integrator Standard Edition (CVE-2018-1718)

Summary IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting Vulnerability Details CVEID: CVE-2018-1718 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...

Security Bulletin: XML External Entity Injection Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2019-4043)

Summary IBM Sterling B2B Integrator Standard Edition has addressed the XML External Entity Injection vulnerability Vulnerability Details CVEID: CVE-2019-4043 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to an XML External Entity Injection XXE attack when processing XML...

Security Bulletin: Information disclosure vulnerability affects IBM Sterling B2B Integrator (CVE-2016-5986)

Summary IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information Vulnerability Details CVEID: CVE-2016-5986 DESCRIPTION: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitiv...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator (CVE-2016-0702, CVE-2016-0705, CVE-2016-0798, CVE-2016-0799,  CVE-2016-0797).

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL could allow a local attacker to...

Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2017-1481)

Summary Information disclosure security vulnerability affects IBM Sterling B2B Integrator. Vulnerability Details CVEID: CVE-2017-1481 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition allows a user to view sensitive information that belongs to another user. CVSS Base Score: 3.1 CVSS...

Security Bulletin: Multiple IBM MQ Security Vulnerabilities Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator Standard Edition has addressed the IBM MQ security vulnerabilities Vulnerability Details CVEID: CVE-2019-4039 DESCRIPTION: IBM MQ 8.0.0.0 through 8.0.0.9, 9.0.0.0 through 9.0.0.6, 9.1.0.0 through 9.1.0.1 and 9.1.1 could allow a local attacker to cause a denial ...

Security Bulletin: Multiple Vulnerabilities in Apache Commons Affect IBM Sterling B2B Integrator (CVE-2016-3092, CVE-2014-0050, CVE-2013-0248)

Summary Multiple vulnerabilities in Apache Commons exists in IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sending file upload requests, an...

Security Bulletin: Security vulnerability in OpenSSL affects IBM Sterling B2B Integrator (CVE-2017-3736)

Summary Security vulnerability in OpenSSL affects IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2017-3736 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a carry propagation flaw in the x8664 Montgomery squaring function bnsqrx8xinterna...