Lucene search
+L

2060 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.16 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

8.7CVSS5.2AI score0.00781EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.13 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in synchronization errors when using shared resources. This allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow remote attackers to bypass...

3.7CVSS5.6AI score0.00392EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.10 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to improper authentication procedures, allows attackers to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to improper authentication processes. Exploiting these vulnerabilities allows a malicious actor to bypass existing security restrictions...

9.7CVSS5.5AI score0.17186EPSS
SaveExploits0References3Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/29 2:11 a.m.89 views

Security Bulletin: Apache Tomcat Vulnerabilities Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed the security vulnerabilities. Vulnerability Details CVEID:CVE-2016-8735 DESCRIPTION: Apache Tomcat could allow a remote attacker to execute arbitrary code on the system, caused by an error in the JmxRemoteLifecycleListener. By sending specially...

9.8CVSS9.7AI score0.90338EPSS
SaveExploits14Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/25 10:49 a.m.51 views

Security Bulletin: Multiple Vulnerabilities in IBM webMethods B2B

Summary Multiple vulnerabilities were addressed in the latest fix release for IBM webMethods B2B 11.1 Vulnerability Details CVEID:CVE-2015-6644 DESCRIPTION: Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted...

7.5CVSS10AI score0.0895EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:44 a.m.11 views

Security Bulletin: IBM Sterling B2B Integrator is Vulnerable to Information Disclosure (CVE-2024-45089)

Summary IBM Sterling B2B Integrator has addressed the information disclosure vulnerability Vulnerability Details CVEID:CVE-2024-45089 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an...

4.3CVSS4.2AI score0.00282EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:43 a.m.15 views

Security Bulletin: IBM Sterling B2B Integrator is Vulnerable to Cross-Site Scripting (CVE-2024-47116)

Summary IBM Sterling B2B Integrator has addressed the Cross-Site scripting vulnerability Vulnerability Details CVEID:CVE-2024-47116 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary...

5.4CVSS5.3AI score0.00218EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:43 a.m.14 views

Security Bulletin: The Dashboard of IBM Sterling B2B Integrator is Vulnerable to Cross-Site Scripting (CVE-2024-47103, CVE-2024-49807, CVE-204-40696)

Summary IBM Sterling B2B Integrator has addressed the cross-site scripting security vulnerability Vulnerability Details CVEID:CVE-2024-47103 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed...

6.4CVSS5.1AI score0.00218EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:42 a.m.10 views

Security Bulletin: The Dashboard of the IBM Sterling B2B Integrator is Vulnerable to Cross-Site Request Forgery (CVE-2023-38739)

Summary IBM Sterling B2B Integrator has addressed the Cross-Site request forgery security vulnerability Vulnerability Details CVEID:CVE-2023-38739 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site request forgery which could allow an attacker to execute malicio...

8.8CVSS6.7AI score0.00165EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 3:27 a.m.54 views

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to Cross-Site Scripting (CVE-2022-34330)

Summary IBM Sterling B2B Integrator has addressed the cross-site scripting vulnerability Vulnerability Details CVEID:CVE-2022-34330 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i...

6.1CVSS5.9AI score0.00392EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 3:27 a.m.41 views

Security Bulletin: B2B API of IBM Sterling B2B Integrator is vulnerable to Cross Origin Resource Sharing (CORS) (CVE-2021-38928)

Summary IBM Sterling B2B Integrator has addressed the Cross Origin Sharing vulnerability in B2B API Vulnerability Details CVEID:CVE-2021-38928 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged...

5.4CVSS5.1AI score0.00381EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 3:27 a.m.61 views

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to access control issue (CVE-2022-43920)

Summary IBM Sterling B2B Integrator has addressed the access control security vulnerability. Vulnerability Details CVEID:CVE-2022-43920 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to gain privileges in a different group due to an access control...

8.8CVSS8.7AI score0.00549EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 3:26 a.m.59 views

Security Bulletin: Dashboard of IBM Sterling B2B Integrator is vulnerable to session mismanagment (CVE-2022-22371)

Summary IBM Sterling B2B Integrator has addressed the session mismangement vulnerability in Dashboard. Vulnerability Details CVEID:CVE-2022-22371 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition does not invalidate session after a password change which could allow an authenticated user t...

6.5CVSS6.3AI score0.00328EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 3:26 a.m.46 views

Security Bulletin: B2B API of IBM Sterling B2B Integrator is vulnerable to information disclosure (CVE-2022-22337)

Summary IBM Sterling B2B Integrator has addressed the information disclousre vulnerability in B2B API Vulnerability Details CVEID:CVE-2022-22337 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could disclose sensitive information to an authenticated user. CVSS Base score: 4.3 CVSS...

6.5CVSS6AI score0.00522EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 3:25 a.m.45 views

Security Bulletin: EBICS Client of IBM Sterling B2B Integrartor is vulnerable SQL Injection (CVE-2022-22338)

Summary IBM Sterling B2B Integrator has addressed the SQL injection vulnerability in EBICS client. Vulnerability Details CVEID:CVE-2022-22338 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements,...

9.8CVSS9.8AI score0.00677EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 3:25 a.m.51 views

Security Bulletin: Dashboard of IBM Sterling B2B Integrator is vulnerable to cross-site scripting (CVE-2022-22352)

Summary IBM Sterling B2B Integrator has addressed the cross-site scripting vulnerability in Dashboard. Vulnerability Details CVEID:CVE-2022-22352 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

5.4CVSS5.2AI score0.00365EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 2:01 a.m.44 views

Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulnerable to sensitive information exposure (CVE-2021-39087)

Summary IBM Sterling B2B Integrator dashboard UI has addressed a sensitive information exposure security vulnerability. Vulnerability Details CVEID:CVE-2021-39087 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive information due to...

6.5CVSS6AI score0.00629EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 2:00 a.m.39 views

Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulner to SQL Injection (CVE-2021-39085)

Summary IBM Sterling B2B Integrator dashboard UI has addressed an SQL injection vulnerability. Vulnerability Details CVEID:CVE-2021-39085 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which...

9.8CVSS9.8AI score0.00902EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 1:59 a.m.50 views

Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulnerable to XSS (CVE-2021-39035)

Summary IBM Sterling B2B Integrator dashboard UI is vulnerable to cross-site scription XSS. The issue has been addressed. Vulnerability Details CVEID:CVE-2021-39035 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to...

5.4CVSS5.2AI score0.00494EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/15 3:28 a.m.12 views

CVE-2024-52905

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 could disclose sensitive database information to a privileged user...

2.7CVSS6.1AI score0.00277EPSS
SaveExploits0References1
Rows per page
Query Builder