ibm-sterling-b2b-integrator-poc

IBM Sterling B2B Integrator PoC Proof of concept code for the exploitation of the vulnerabilities discovered against IBM Sterling B2B Integrator, versions 6.2.0.0 to 6.2.0.2, and 6.0.0.0 to 6.1.2.5 for Linux, Windows and AIX systems: LPE Command Injection - if authentication is disabled Pre-auth...

WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

WSO2 - Cross-Site Scripting

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...

CVE-2022-29464

CVE-2022-29464 WSO2 is a leading provider of various SOA solutions, including SOA-related infrastructure, technical frameworks, and related tools, process servers, application servers, etc. Affected Versions 2.2.0 ≤ WSO2 API Manager ≤ 4.0.0 5.2.0 ≤ WSO2 Identity Server ≤ 5.11.0 WSO2 Identity Serv...

EUVD-2026-124036

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

CVE-2026-65949

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

CVE-2026-65949 Lenovo XClarity Integrator for WAC: Gateway-Administrator Remote Command Execution

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

CVE-2026-65949

Lenovo XClarity Integrator for Microsoft Windows Admin Center versions 5.1.1 and 5.2.0 are vulnerable to a Remote Command Execution (RCE) flaw. The root cause is the improper neutralization of special elements used in an OS command, which allows an authenticated remote attacker to execute arbitra...

CVE-2026-65949: Lenovo XClarity Integrator for WAC: Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows…

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

CVE-2026-81209

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-19307

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

CVE-2026-81209

IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition) are vulnerable to CVE-2026-81209 due to improper logging of sensitive credentials (CWE-532 ). This flaw could allow a remote authenticated attacker to obtain sensitive information. Affected versions include B2B Integrato...

EUVD-2026-119727

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-81209 Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-19307

IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition) are affected by an improper authorization vulnerability (CWE-285). A remote authenticated attacker could exploit this to access unauthorized pages. The affected versions include IBM Sterling B2B Integrator versions 6.2.1...

EUVD-2026-119707

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

CVE-2026-19307 Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

CVE-2026-12737

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

EUVD-2026-119677

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

CVE-2026-12737 IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...