CVE-2021-29855

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-29837

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204913...

CVE-2021-29837

CVE-2021-29837 affects IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–6.1.1.0). The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user. Affected products and versions are l...

CVE-2021-29836

The CVE-2021-29836 issue affects IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.1.1.0, where a cross-site scripting vulnerability exists in the Dashboard/Web UI that allows embedding arbitrary JavaScript, potentially enabling credential disclosure within a trusted session...

CVE-2021-29836

IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-29798

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734...

CVE-2021-29798

Summary : CVE-2021-29798 affects IBM Sterling B2B Integrator Standard Edition. Versions 6.0.0.0 through 6.1.1.0 are vulnerable to SQL injection, allowing a remote attacker to view, add, modify, or delete information in the back-end database through crafted SQL statements. The issue is documented ...

CVE-2021-29764

CVE-2021-29764 affects IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0. The vulnerability is a stored cross-site scripting flaw in the Web UI/Dashboard UI that may allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s bu...

CVE-2021-29764

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2021-29761

CVE-2021-29761 affects IBM Sterling B2B Integrator Standard Edition 5.2.0.0–6.1.1.0. An authenticated user could obtain sensitive information from the dashboard that they should not access (information disclosure). Remediation: upgrade to a fixed version (6.1.1.0 or applicable 6.0.x/6.1.x fixes a...

CVE-2021-29761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265...

CVE-2021-29760

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213...

CVE-2021-29760

IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0–6.1.1.0 expose an input validation weakness in the dashboard UI that could allow an authenticated user to download unauthorized files. Connected sources (CNVD/CNNVD and IBM bulletin) describe this as an input validation vulnerability a...

CVE-2021-29758

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169...

CVE-2021-29758

CVE-2021-29758 affects IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.1.1.0, where an authenticated user can perform actions they should not access due to improper access controls (authorization issue). The IBM bulletin/wide references indicate a base CVSS around 4.3 (MED...

Security Bulletin: Access Control Vulnerability Affects IBM Sterling File Gateway (CVE-2021-20376)

Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20376 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. CVSS Base...

Security Bulletin: Cross-Site Scripting Vulnerability Affects IBM Sterling File Gateway (CVE-2021-20481)

Summary IBM Sterling File Gateway has addressed the security vulnerabilty. Vulnerability Details CVEID: CVE-2021-20481 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...

Security Bulletin: Information Disclosure Vulnerabilty Affects IBM Sterling File Gateway User Interface (CVE-2021-20552)

Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20552 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This...

Security Bulletin: Access Control Vulnerability Affects myfilegateway User Interface of IBM Sterling File Gateway (CVE-2021-20561)

Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20561 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...

Security Bulletin: Access Control Vulnerability Affects Myfilegateway User Interface of IBM Sterling File Gateway (CVE-2021-20584)

Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20584 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to upload arbitrary files, caused by improper access controls. CVSS Base score: 6.5 CVSS Temporal Score: See...