CVE-2017-1544

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 caches usernames and passwords in browsers that could be used by a local attacker to obtain sensitive information. IBM X-Force ID: 130812...

CVE-2018-1564

IBM Sterling B2B Integrator Standard Edition (5.2.0.1–5.2.6.3) could allow a local administrator to obtain user passwords from debugging messages. This is documented in CVE-2018-1564 and corroborated by IBM security bulletin and CNVD summaries. Remediation: apply Fix Pack 5020603_6 (IBM Sterling ...

CVE-2018-1563

CVE-2018-1563 affects IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0–2.2.6). The vulnerability is a cross-site scripting (XSS) flaw in the Web UI that could allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trus...

CVE-2017-1575

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 uses weaker than expected cryptographic algorithms that could allow a local attacker to decrypt highly sensitive information. IBM X-Force ID: 132032...

CVE-2018-1679

IBM Sterling B2B Integrator Standard Edition (5.2.0.1–5.2.6.3) has an information-disclosure vulnerability (CVE-2018-1679) allowing an unauthenticated user to obtain sensitive data. The IBM Security Bulletin confirms the issue and lists remediation: apply Fix Pack 5020603_6 through IBM Fix Centra...

CVE-2018-1563

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

CVE-2017-1575: Use of a Broken or Risky Cryptographic Algorithm

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 uses weaker than expected cryptographic algorithms that could allow a local attacker to decrypt highly sensitive information. IBM X-Force ID: 132032...

PT-2018-13123

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2 through 5.2.6 Description The issue allows a local user with administrator privileges to obtain user passwords found in debugging messages. Recommendations For versions 5.2 through 5.2....

PT-2018-5822

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 2.2.0 through 2.2.6 Description: The issue allows a local attacker to obtain sensitive information by exploiting cached usernames and passwords in browsers. Recommendations: For versions...

PT-2018-6265

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 5.2 through 5.2.6 Description: The issue allows an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests. Recommendations: For IBM Sterling B2B Integrat...

PT-2018-13122

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 2.2.0 through 2.2.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosur...

PT-2018-13749

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2 through 5.2.6 Description The issue could allow an unauthenticated user to obtain sensitive information that could be used in further attacks against the system. Recommendations For...

PT-2018-5988

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 2.2.0 through 2.2.6 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow a local attacker to decrypt highly sensitive informatio...

CVE-2018-1563: Improper Neutralization of Input During Web Page Generation

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

CVE-2017-1544: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 caches usernames and passwords in browsers that could be used by a local attacker to obtain sensitive information. IBM X-Force ID: 130812...

CVE-2018-1679: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 145180...

CVE-2017-1633: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests. IBM X-Force ID: 133180...

CVE-2018-1564: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages. IBM X-Force ID: 142968...

Security Bulletin: Multiple Vulnerabilities in IBM Java SDK Affect IBM B2B Advanced Communications

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 Service Refresh 10 Fix Pack 10 that is used by IBM B2B Advanced Communications. This issue was disclosed as part of the IBM Java SDK updates in October 2017 Vulnerability Details CVEID: CVE-2017-10295...

Security Bulletin: IBM B2B Advanced Communications is Affected by an XML External Entity Injection (XXE) Attack when Processing XML Data

Summary IBM B2B Advanced Communications has addressed a vulnerability originally found in IBM Financial Transaction Manager of an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory...