CVE-2018-1720

IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.36, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 147294...

CVE-2018-1720

CVE-2018-1720 affects IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1. Root cause: use of weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Impact (as stated): partial confidentiality loss; no ...

CVE-2019-4222

IBM Sterling B2B Integrator Standard Edition 6.0.0.0–6.0.0.1 is affected by CVE-2019-4222, allowing an authenticated user to view the process definition of a business process without permission. The issue is an information disclosure vulnerability rooted in insufficient access control for process...

CVE-2019-4148

IBM Sterling B2B Integrator Standard Edition CVE-2019-4148 is a cross‑site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected versions span IBM Sterling B2B Integrator Standard Editi...

CVE-2019-4146

CVE-2019-4146 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1 . The vulnerability is an information disclosure that could allow an authenticated user to obtain sensitive document information under unusual circumstances. The IBM security bulletin for this CVE (and CVE...

CVE-2019-4076

CVE-2019-4076 affects IBM Sterling B2B Integrator Standard Edition. The vulnerability is a cross-site scripting (XSS) issue in the Web UI that could allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected products/versions...

CVE-2019-4073

IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.0.0.1) is affected by a cross-site scripting vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Connected advisories/records confirm the is...

CVE-2019-4075

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1 are affected by CVE-2019-4075, a cross-site scripting vulnerability in the Web UI that can enable embedding arbitrary JavaScript and potentially expose credentials in a trusted session. The NVD/IBM notes the vulnerability with ...

CVE-2019-4074

CVE-2019-4074 involves IBM Sterling B2B Integrator Standard Edition, with vulnerable versions 6.0.0.0–6.0.0.1. The issue is cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript, potentially leaking credentials in a trusted session. Connected sources (IBM security bul...

CVE-2019-4077

CVE-2019-4077 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1. Description: cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript and potentially lead to credentials disclosure within a trusted session. Root cause indicated by sources is ...

CVE-2019-4076

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4222

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to view process definition of a business process without permission. IBM X-Force ID: 159231...

CVE-2019-4148

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2019-12468)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates B2B processes, transactions and relationships. An information disclosure vulnerability exists in IBM Sterling B2B Integrator versions 5.2.0.1 through 5.2.6.36 and 6.0.0.0. The vulnerability, which stems from the failu...

PT-2019-16926 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.0.1 Description: The issue allows an authenticated user to obtain sensitive document information under unusual circumstances. Recommendations: For versions 6.0.0.0 and...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2019-14590)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-14591)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in BM Sterling B2...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-14592)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-12466)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates B2B processes, transactions and relationships. A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.0.1. The vulnerability stems from the failure of...

PT-2019-16928 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.0.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...