PT-2022-10883 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.1.1 Description: The issue allows an authenticated user to obtain sensitive information due to improper permission controls. Recommendations: For versions 6.0.0.0 throu...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to denial of service due to SnakeYAML (CVE-2017-18640)

Summary MyFG 2.0 of IBM Sterling B2B Integrator uses SnakeYAML. There is a denial of service vulnerability in SnakeYAML which has been addressed. Vulnerability Details CVEID:CVE-2017-18640 DESCRIPTION: SnakeYAML is vulnerable to a denial of service, caused by an entity expansion in Alias feature...

Security Bulletin: IBM Sterling B2B Integrator is affected by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Sterling B2B Integrator is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spri...

CVE-2017-20137

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...

Sql injection

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...

CVE-2017-20137 Itech B2B Script catcompany.php sql injection

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...

CVE-2017-20137 Itech B2B Script catcompany.php sql injection

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...

CVE-2017-20137

CVE-2017-20137 affects Itech B2B Script 4.28. A SQL injection vulnerability exists in the handling of /catcompany.php, triggered by crafting input such as 704667c6a1e7ce56d3d6fa748ab6d9af3fd7’ AND 6539=6539 AND ’Fakj’=’Fakj. The issue is exploitable remotely and the exploit has been disclosed pub...

Ambit Technologies iTech B2B Script SQL注入漏洞

Ambit Technologies iTech B2B Script is a B2B e-commerce system script from Ambit Technologies, India. Ambit Technologies iTech B2B Script version 4.28 suffers from a SQL injection vulnerability that stems from the presence of an insecure file, subpage.php, which can be exploited by an attacker to...

How Technology Can Help Your Business Succeed

By Owais Sultan The B2B world is known as the bland counterpart of B2C, and this is because of the two… This is a post from HackRead.com Read the original post: How Technology Can Help Your Business Succeed...

Insider Threat: Employees indicted for stealing $88 million of license keys

Two insiders and an accomplice were indicted on Tuesday for multiple counts of fraud. According to documents unsealed by the Wester District of Oaklahoma, a grand jury charged Raymond Bradley Pearce aka Brad Pearce, a former employee of Avaya; Dusti O. Pearce, his wife; and Jason M. Hines aka Joe...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2023-05244)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

CVE-2021-38954

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...

Design/Logic Flaw

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...

CVE-2021-38954

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414...

CVE-2021-38954

CVE-2021-38954 affects IBM Sterling B2B Integrator Standard Edition. The vulnerability is an information disclosure that allows an attacker to obtain sensitive version information, potentially aiding further attacks. Affected versions are 6.0.0.0–6.0.3.5 and 6.1.0.0–6.1.1.0. IBM provides fixes: u...

Security Bulletin: IBM Sterling B2B Integrator B2B API is vulnerable to information disclosure vulnerability (CVE-2021-38954)

Summary IBM Sterling B2B Integrator has addressed a sensitive version information disclosure vulnerability. Vulnerability Details CVEID:CVE-2021-38954 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could diclose sensitive version information that could aid in future attacks against the...

Malicious code in b2b-event-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed27a1d433185da787b0aed1964e26c1a94bb18dcb99a2be19bbc8b0366c53f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1400 Malicious code in b2b-event-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed27a1d433185da787b0aed1964e26c1a94bb18dcb99a2be19bbc8b0366c53f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6247 Malicious code in spotify-b2b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c539189f641ea8043f9015a8e6bd03168888b20ede254ae58a0b60886c0701f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...