Security Bulletin: IBM Sterling B2B Integrator has Cross Site Scripting vulnerabilities in Queue Watcher (CVE-2017-1496)

Summary IBM Sterling B2B Integrator Queue Watcher could allow a Cross Site Scripting attack Vulnerability Details CVEID: CVE-2017-1496 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod...

CVE-2017-1496

IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1496

CVE-2017-1496 affects IBM Sterling B2B Integrator Standard Edition (5.2.x). A cross-site scripting vulnerability exists in the Queue Watcher component that allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credential disclosure within a trusted session. The...