CVE-2020-4692

CVE-2020-4692 affects IBM Sterling B2B Integrator Standard Edition: 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. It is a path traversal vulnerability that could allow an authenticated user to obtain sensitive information from the Dashboard UI. Remediation: upgrade to 5.2.6.5_3, 6.0.3.3, or 6.1.0.0 (per I...

CVE-2020-4671

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284...

CVE-2020-4671

CVE-2020-4671 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. The issue is an information disclosure where potentially sensitive data can be read from log files by an authenticated user. IBM’s Security Bulletin details the affected versions and p...

CVE-2020-4655

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...

CVE-2020-4655

The CVE affects IBM Sterling B2B Integrator Standard Edition, specifically versions 6.0.0.0–6.0.3.2 and 5.2.0.0–5.2.6.5. The underlying issue is SQL injection that could let a remote attacker view, add, modify, or delete data in the back-end database. IBM’s security bulletin lists remediation by ...

CVE-2020-4475

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2020-4566

IBM Sterling B2B Integrator External/Backend B2B API logs may expose highly sensitive information to authenticated users. Affects Standard Edition 5.2.6.0–5.2.6.5 and 6.0.0.0–6.0.3.2. Root cause is information disclosure via log files; remediation: upgrade to 5.2.6.5_3, 6.0.3.3, or 6.1.0.0 (per I...

CVE-2020-4475

CVE-2020-4475 affects IBM Sterling B2B Integrator Standard Edition. A remote attacker could obtain sensitive information via a detailed technical error message returned in the browser, enabling further attacks. Affected versions: 5.2.0.0–5.2.6.5 and 6.0.0.0–6.0.3.2. Remediation: update to 5.2.6.5...

CVE-2020-4566

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083...

IBM Sterling B2B Integrator Path Traversal Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A path traversal vulnerability exists in IBM Sterling B2B...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2020-63977)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2020-63942)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffers from a SQL injection...

Security Bulletin: XSS Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4705)

Summary IBM Sterling B2B Integrator has addressed an XSS vulnerability. Vulnerability Details CVEID: CVE-2020-4705 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

Security Bulletin: Path Traversal Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4692)

Summary IBM Sterling B2B Integrator has addressed a path traversal vulnerability. Vulnerability Details CVEID: CVE-2020-4692 DESCRIPTION: IBM Sterling B2B Integrator could allow an authenticated user to obtain sensitive information from the Dashboard UI. CVSS Base score: 4.3 CVSS Temporal Score:...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4671)

Summary IBM Sterling B2B Integrator has addressed an information disclosure vulnerability. Vulnerability Details CVEID: CVE-2020-4671 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information in log files that could be read by an authenticatedl user. CVSS...

Security Bulletin: SQL Injection Vulnerability Affects EBICS in IBM Sterling B2B Integrator (CVE-2020-4655)

Summary IBM Sterling B2B Integrator has addressed the SQL injection vulnerability in EBICS. Vulnerability Details CVEID: CVE-2020-4655 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which cou...

Security Bulletin: SQL Injection Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4647)

Summary IBM Sterling File Gateway has addressed a SQL injection vulnerability. Vulnerability Details CVEID: CVE-2020-4647 DESCRIPTION: IBM Sterling File Gateway is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view,...

Security Bulletin: Permisson Control Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4700)

Summary IBM Sterling B2B Integrator has addressed a permisson control vulnerability. Vulnerability Details CVEID: CVE-2020-4700 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user belonging to a specific user group to create a user or group with...

Security Bulletin: B2B API Information Disclosure Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-4566)

Summary IBM Sterling B2B Integrator has addressed an information disclosure vulnerability found within the B2B API. Vulnerability Details CVEID: CVE-2020-4566 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially highly sensitive information in log files that could be read ...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4476)

Summary IBM Sterling File Gateway has addressed a information dislcoure vulnerability. Vulnerability Details CVEID: CVE-2020-4476 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser...