Cross site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Sql injection

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 219510...

Code injection

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user. IBM X-Force ID: 219507...

CVE-2022-22337

CVE-2022-22337 affects IBM Sterling B2B Integrator Standard Edition, versions 6.0.0.0 through 6.1.2.1. The vulnerability enables information disclosure to an authenticated user. The IBM Security Bulletin lists affected versions and fixes: upgrade to 6.0.3.7 for 6.0.x series, or to 6.1.0.6 or 6.1....

CVE-2022-22337 IBM Sterling B2B Integrator Standard Edition information disclosure

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user. IBM X-Force ID: 219507...

CVE-2022-22337 IBM Sterling B2B Integrator Standard Edition information disclosure

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user. IBM X-Force ID: 219507...

CVE-2022-22338 IBM Sterling B2B Integrator Standard Edition SQL injection

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 219510...

CVE-2022-22338

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.1.2.1 are affected by a SQL injection vulnerability (CVE-2022-22338). A remote attacker could craft SQL statements to view, add, modify, or delete data in the back-end database. The IBM Security Bulletin Acknowledges the issue and li...

CVE-2022-22338 IBM Sterling B2B Integrator Standard Edition SQL injection

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 219510...

CVE-2022-22371 IBM Sterling B2B Integrator Standard Edition session fixation

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195...

CVE-2022-22371 IBM Sterling B2B Integrator Standard Edition session fixation

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195...

CVE-2022-22371

Summary (CVE-2022-22371) IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.1.2.1) does not invalidate a session after a password change, enabling an authenticated user to impersonate another user. The IBM advisory confirms the vulnerability details and lists affected versions, with...

CVE-2021-38928

CVE-2021-38928 affects IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.1.2.1). The issue is a Cross-Origin Resource Sharing (CORS) misconfiguration: the B2B API could allow an attacker to perform privileged actions and retrieve sensitive information because the allowed domains ar...

CVE-2021-38928 IBM Sterling B2B Integrator Standard Edition cross-origin resource sharing

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323...

CVE-2021-38928 IBM Sterling B2B Integrator Standard Edition cross-origin resource sharing

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323...

CVE-2022-43920 IBM Sterling B2B Integrator Standard Edition privilege escalation

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control vulnerability in the Sftp server adapter. IBM X-Force ID: 241362...

CVE-2022-43920

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.1.2.1 contain an access control vulnerability in the SFTP server adapter that could allow an authenticated user to gain privileges in a different group. Affected products/versions are: 6.0.0.0–6.0.3.6 and 6.1.0.0–6.1.0.5, 6.1.1.0–6.1...

CVE-2022-43920 IBM Sterling B2B Integrator Standard Edition privilege escalation

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control vulnerability in the Sftp server adapter. IBM X-Force ID: 241362...

CVE-2022-34330

Summary: CVE-2022-34330 affects IBM Sterling B2B Integrator Standard Edition 6.0.0.0–6.1.2.1 and is a cross-site scripting vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. Affected product/versions: IBM Sterling B2B Integrator Standard Edition 6.0.0.0–...

CVE-2022-34330 IBM Sterling B2B Integrator cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...