Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulner to SQL Injection (CVE-2021-39085)

Summary IBM Sterling B2B Integrator dashboard UI has addressed an SQL injection vulnerability. Vulnerability Details CVEID:CVE-2021-39085 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which...

CVE-2021-39085

IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.0.3.5, 6.1.0.0–6.1.0.4, 6.1.1.0–6.1.1.1) is vulnerable to SQL injection due to insufficient validation of externally supplied SQL statements. A remote attacker could exploit this to view, add, modify, or delete data in the back-end ...