Security Bulletin: Multiple Cross-Site Scripting Vulnerabilities Affect IBM Sterling B2B Integrator (CVE-2019-4027, CVE-2019-4028, CVE-2019-4029)

Summary IBM Sterling B2B Integrator Standard Edition has addressed the cross-scripting vulnerabilities Vulnerability Details CVEID: CVE-2019-4029 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

CVE-2019-4029

CVE-2019-4029 affects IBM Sterling B2B Integrator Standard Edition, versions 5.2.0.1 through 6.0.0.0. The issue is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s bul...