Lucene search
+L

2059 matches found

NVD
NVD
added 2023/01/24 9:15 a.m.22 views

CVE-2022-4554

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347...

5.4CVSS5.2AI score0.00337EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/24 9:15 a.m.21 views

Cross site scripting

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347...

4.9CVSS5.2AI score0.00337EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/01/24 7:30 a.m.23 views

CVE-2022-4554

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347...

5.4CVSS6AI score0.00337EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/01/24 12:00 a.m.33 views

CVE-2022-4554 Reflected XSS B2B Dealer Ordering System

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347...

5.4CVSS5.4AI score0.00337EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/01/24 12:00 a.m.8 views

B2B Customer Ordering System 1.0.0.347 跨站脚本漏洞

ID YAZILIM B2B Customer Ordering System is an application from ID YAZILIM, Inc. A security vulnerability exists in B2B Customer Ordering System versions prior to 1.0.0.347, which stems from the presence of an authenticated reflected XSS vulnerability...

5.4CVSS5.7AI score0.00337EPSS
SaveExploits0References2
CVE
CVE
added 2023/01/24 12:00 a.m.52 views

CVE-2022-4554

The CVE-2022-4554 entry concerns the B2B Customer Ordering System developed by ID Software Project and Consultancy Services. Affected versions are prior to 1.0.0.347 and the vulnerability is an authenticated Reflected XSS vulnerability. The issue is resolved in version 1.0.0.347. Exploitation det...

5.4CVSS5.5AI score0.00337EPSS
SaveExploits0References2Affected Software1
HackRead
HackRead
added 2023/01/13 7:25 p.m.20 views

5 B2B Data Privacy Startups to Check Out in 2023

By Owais Sultan B2B data privacy startups have become increasingly important in recent years as businesses seek to protect the sensitive… This is a post from HackRead.com Read the original post: 5 B2B Data Privacy Startups to Check Out in 2023...

4.2AI score
SaveExploits0
CNVD
CNVD
added 2023/01/11 12:00 a.m.47 views

IBM Sterling B2B Integrator Session Fixation Vulnerability

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A session fixation vulnerability...

6.5CVSS6.3AI score0.00328EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/11 12:00 a.m.43 views

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2023-05238)

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting...

6.1CVSS5.9AI score0.00392EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/01/09 2:52 p.m.43 views

Security Bulletin: B2B API of IBM Sterling B2B Integrator is vulnerable to multiple issues due to FasterXML jackson-databind

Summary IBM Sterling B2B Integrator has addressed the security vulnerabilities in jackson-databind in B2B API. Vulnerability Details CVEID:CVE-2019-20330 DESCRIPTION: A lacking of certain net.sf.ehcache blocking in FasterXML jackson-databind has an unknown impact and attack vector. CVSS Base scor...

9.8CVSS9.8AI score0.45205EPSS
SaveExploits8Affected Software1
CNVD
CNVD
added 2023/01/09 12:00 a.m.32 views

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2023-05240)

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator...

9.8CVSS9.6AI score0.00677EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/09 12:00 a.m.33 views

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2023-05241)

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure...

6.5CVSS6.1AI score0.00522EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/09 12:00 a.m.50 views

IBM Sterling B2B Integrator elevation of privilege vulnerability (CNVD-2023-05239)

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An elevation of privilege...

8.8CVSS8.8AI score0.00549EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/09 12:00 a.m.23 views

Unspecified Vulnerability in IBM Sterling B2B Integrator

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists i...

5.4CVSS5.3AI score0.00381EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/06 12:00 a.m.34 views

IBM Sterling B2B Integrator Standard Edition Cross-Site Scripting Vulnerability (CNVD-2023-05243)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.1. An attacker could exploit the...

5.4CVSS5.3AI score0.00365EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/01/05 12:14 p.m.92 views

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to denial of service due to Google Gson (CVE-2022-25647)

Summary IBM Sterling B2B Integrator has addressed a denial of service vulnerability in Google Gson. Vulnerability Details CVEID:CVE-2022-25647 DESCRIPTION: Google Gson is vulnerable to a denial of service, caused by the deserialization of untrusted data. By using the writeReplace method, a remote...

7.7CVSS7.4AI score0.1223EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2023/01/05 7:15 a.m.28 views

CVE-2022-34330

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.8AI score0.00392EPSS
SaveExploits0References2
OSV
OSV
added 2023/01/05 7:15 a.m.10 views

CVE-2022-22371

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195...

6.5CVSS5.8AI score0.00328EPSS
SaveExploits0References2
NVD
NVD
added 2023/01/05 7:15 a.m.30 views

CVE-2022-22371

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195...

6.5CVSS5.8AI score0.00328EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/05 7:15 a.m.17 views

Cross site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.8CVSS5.7AI score0.00392EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder