Security Bulletin: Cross-Site Scripting vulnerability affects IBM Sterling B2B Integrator (CVE-2020-4657)

Summary IBM Sterling B2B Integrator has addressed a XSS vulnerability. Vulnerability Details CVEID: CVE-2020-4657 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

CVE-2020-4657

The IBM Sterling B2B Integrator CVE-2020-4657 affects Standard Edition versions 5.2.0.0 through 6.0.3.2. It is a cross-site scripting vulnerability that lets an attacker embed arbitrary JavaScript in the Web UI, potentially disclosing credentials in a trusted session. Remediation: upgrade to IBM ...