CVE-2012-5766

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than...

CVE-2013-2982

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors...

CVE-2013-0479

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename...

CVE-2013-0468

IBM Sterling CVE-2013-0468 describes a cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1/5.2 and Sterling File Gateway 2.1/2.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, potentially impacting browser conte...

CVE-2013-0476

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to inject arbitrary FTP commands via unspecified vectors...

CVE-2013-0463

CVE-2013-0463 is an Information Disclosure vulnerability affecting IBM Sterling B2B Integrator 5.0–5.2 and IBM Sterling File Gateway 2.0–2.2. Remote authenticated users could obtain sensitive information about application implementation via unspecified vectors. IBM’s bulletin lists multiple fixes...

CVE-2013-0567

CVE-2013-0567 affects IBM Sterling File Gateway (2.2 and 2.1) and is described in IBM’s security bulletin as an Information Disclosure vulnerability in that product. The connected IBM bulletin lists multiple related vulnerabilities and remediation steps (APARs/iFixes) for the affected IBM Sterlin...

CVE-2013-0560

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766...

CVE-2013-0479

CVE-2013-0479 affects IBM Sterling B2B Integrator (5.2, 5.1, 5.0) and IBM Sterling File Gateway (2.2, 2.1, 2.0); the flaw is File Type/Extension Manipulation due to insufficient validation, allowing remote authenticated users to bypass access restrictions via crafted filenames. Remediation is ava...

CVE-2013-2987

CVE-2013-2987 is part of an Information Disclosure family affecting IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (versions 2.2/2.1/2.0). The connected IBM Security Bulletin documents multiple vulnerabilities with this family, including 2987, describing that rem...

CVE-2013-0539

The CVE-2013-0539 entry involves an insufficient Session-ID length in a third-party component used by IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). Root cause: short session identifiers enable brute-force session guessing, allowing potential sess...

CVE-2013-0481

CVE-2013-0481 affects IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). The issue: errors or exceptions in the console processing may cause stack traces to be displayed in responses, potentially exposing internal implementation details. The CVE is do...

CVE-2013-0475

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

CVE-2013-3020

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-0568,...

CVE-2013-0568

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

CVE-2013-2982

CVE-2013-2982 affects IBM Sterling B2B Integrator (versions 5.1–5.2) and IBM Sterling File Gateway (2.1–2.2). It is an Unrestricted File Upload vulnerability that authenticated remote users can exploit to upload arbitrary files via unspecified vectors, potentially aiding other attacks. IBM’s Secu...

CVE-2013-0456

CVE-2013-0456 affects IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2). The connected IBM Security Bulletin confirms a session hijacking risk via a modified cookie path, describing it as an authenticated remote-access issue. Public details list affected products/versi...

CVE-2013-3020

CVE-2013-3020 is an Information Disclosure vulnerability in IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (versions 2.1/2.2/2.0). The IBM bulletin attributes this to disclosure of application implementation details via unspecified vectors. Affected products/vers...

CVE-2013-2985

CVE-2013-2985 is an information-disclosure vulnerability affecting IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). An authenticated remote user could obtain sensitive information about the application implementation via unspecified vectors. The IBM...

CVE-2013-2984

Path traversal vulnerability CVE-2013-2984 affects IBM Sterling B2B Integrator 5.1/5.2 and IBM Sterling File Gateway 2.1/2.2. The IBM security bulletin describes that a path traversal could allow a remote authenticated attacker to read or modify restricted files. Affected product versions are exp...