2558 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-7431
Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-7437
Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors...
CVE-2015-7438
IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...
CVE-2015-7438
CVE-2015-7438 affects IBM Sterling B2B Integrator 5.2. It describes a local information-disclosure flaw where a local attacker can obtain sensitive cleartext web-services information by leveraging database access. Documented in NVD/NIST and corroborated by multiple sources (CNVD, CVE lists). The ...
CVE-2015-7437
IBM Sterling B2B Integrator Queue Watcher in version 5.2 is affected by an information disclosure vulnerability that allows a local user to obtain sensitive information. The IBM Security Bulletin documents affected products as Sterling Integrator 5.1 and IBM Sterling B2B Integrator 5.2, with a CV...
CVE-2015-7431
CVE-2015-7431 is an XSS vulnerability in IBM Sterling B2B Integrator Queue Watcher (5.2). It results from improper validation of user-supplied input, enabling a remote attacker to craft a URL that injects script into a victim’s browser and potentially steal cookie-based credentials. Affected prod...
PT-2016-3774
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. This affects the Queue Watcher component. Recommendations For IBM...
PT-2016-3777
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 Description The issue in IBM Sterling B2B Integrator allows local users to obtain sensitive information. Recommendations For IBM Sterling B2B Integrator version 5.2, at the moment, there is no informatio...
PT-2016-3778
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 Description The issue allows local users to obtain sensitive cleartext web-services information by leveraging database access. Recommendations For IBM Sterling B2B Integrator version 5.2, at the moment,...
CVE-2015-7431: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-7438: Exposure of Sensitive Information to an Unauthorized Actor
IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...
CVE-2015-7437: Exposure of Sensitive Information to an Unauthorized Actor
Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors...
CVE-2015-7445
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...
CVE-2015-7410
The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...
Design/Logic Flaw
The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...
Design/Logic Flaw
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...
CVE-2015-7410
The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...
CVE-2015-7445
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...
CVE-2015-7410
IBM CVE-2015-7410 affects IBM Sterling B2B Integrator 5.2 (Health Check tool). The vulnerability is due to cookies not being properly handled with HTTPS sessions, enabling cookie hijacking via MITM-type scenarios. Affected product/version: IBM Sterling B2B Integrator 5.2. Remediation/fix: apply t...