CVE-2014-6548: Undefined Security Weakness

Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and availability via vectors related to B2B Engine...

CVE-2014-6199

The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service connection-slot exhaustion via a crafted HTTP request...

Design/Logic Flaw

The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service connection-slot exhaustion via a crafted HTTP request...

CVE-2014-6199

The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service connection-slot exhaustion via a crafted HTTP request...

CVE-2014-6199

The CVE affects IBM Sterling B2B Integrator and Sterling File Gateway: HTTP Server Adapter in IBM Sterling B2B Integrator 5.1/5.2.x and Sterling File Gateway 2.1/2.2 allows remote attackers to exhaust connection slots via a crafted HTTP request, causing a denial of service. This summary uses conc...

PT-2015-3837

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.1 through 5.2.x IBM Sterling File Gateway versions 2.1 through 2.2 Description The issue allows remote attackers to cause a denial of service, specifically connection-slot exhaustion, via a crafted HTTP...

CVE-2014-6199: Undefined Security Weakness

The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service connection-slot exhaustion via a crafted HTTP request...

qibocms b2b /news/js.php SQL注入漏洞

No description provided by source...

CVE-2014-6146

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files...

Information disclosure

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files...

CVE-2014-6146

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files...

CVE-2014-6146

IBM Sterling B2B Integrator 5.2.x–5.2.4 is affected when the Connect:Direct Server Adapter is configured. The vulnerability arises from improper processing of the logging configuration, enabling local users to read log files and obtain sensitive information. Affected component is the logging mech...

PT-2014-7066

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.2.x through 5.2.4 Description The issue allows local users to obtain sensitive information by reading log files due to improper processing of the logging configuration when the Connect:Direct Server Adapt...

CVE-2014-6146: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files...

CVE-2014-6099

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...

Default credentials

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...

CVE-2014-6099

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...

CVE-2014-6099

IBM Sterling B2B Integrator 5.2.x (and Sterling Integrator 5.1) is affected by CVE-2014-6099 due to a lack of login- Brute-force protection on the Change Password screen, enabling potential admin credential compromise. The IBM bulletin lists affected versions (5.2 through 5.2.4; 5.1 as applicable...

PT-2014-7044

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.2.x through 5.2.4 Description The issue concerns the Change Password feature, which lacks a lockout protection mechanism for invalid login requests. This makes it easier for remote attackers to gain admin...

CVE-2014-6099: Undefined Security Weakness

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach...