CVE-2017-1193

IBM Sterling B2B Integrator Standard Edition 5.2 is affected by CVE-2017-1193, enabling a user to obtain sensitive information through an HTTP GET request due to improper access controls. The IBM Security Bulletin for CVE-2017-1193 (and related CVE-2017-1302) lists 5.2.6/5.2.x as affected and pro...

CVE-2017-1302

Summary (CVE-2017-1302) : IBM Sterling B2B Integrator Standard Edition (Version 5.2) could allow a local user to view sensitive information due to improper access controls . The root cause is an access control weakness that permits viewing of sensitive data locally. The IBM security bulletin note...

CVE-2017-1348

IBM Sterling B2B Integrator Standard Edition 5.2 is affected by CVE-2017-1348, a cross-site scripting vulnerability in the Web UI that could enable an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. IBM IBM Sterling B2B Integrator has issued f...

CVE-2017-1349

CVE-2017-1349 affects IBM Sterling B2B Integrator Standard Edition 5.2, where HTTP sessions can disclose potentially sensitive information to a local user. The IBM Security Bulletin details the vulnerability as an information-disclosure flaw in the 5.2 release, with a remediation path: apply the ...

CVE-2017-1131

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. IBM X-Force ID: 121375...

CVE-2017-1132

CVE-2017-1132 affects IBM Sterling B2B Integrator Standard Edition 5.2. The published description confirms a cross-site scripting vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. The IBM advisories deta...

CVE-2016-5893

IBM Sterling B2B Integrator Standard Edition 5.2 is affected by CVE-2016-5893 where the product allows web pages to be stored locally and read by a different user on the same system, enabling local info disclosure. Affected product/version: IBM Sterling B2B Integrator Standard Edition 5.2. Root c...

CVE-2017-1347

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126462...

CVE-2017-1132

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2017-1349: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local user. IBM X-Force ID: 126525...

CVE-2017-1131: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. IBM X-Force ID: 121375...

CVE-2016-5893: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 115336...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2017-11308)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...

PT-2017-12984

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue concerns the storage of potentially sensitive information from HTTP sessions, which could be accessed by a local user. Recommendations For IBM Sterling B2B Integrat...

PT-2017-11918

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a truste...

PT-2017-8806

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM Sterling B2B Integrator Standard Edition versio...

PT-2017-12861

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue is related to improper access controls, which could allow a local user to view sensitive information. Recommendations For IBM Sterling B2B Integrator Standard Editi...

PT-2017-12982

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database...

PT-2017-11913

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue allows an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. Recommendations For IBM Sterling B2B Integrator...

PT-2017-12983

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a truste...