IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2016-03222)

IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions and relationships. A security vulnerability in IBM Sterling B2B Integrator exists when the program uses the HTTP OPTIONS method, allowing a remote attacker to obtain sensitive information by...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2016-00155)

IBM Sterling B2B Integrator supports highly secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterling B2B Integrator 5.2. Allows a local user to obtain sensitive plaintext web service information by exploiting...

CVE-2015-7438

IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...

CVE-2015-7437

Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors...

CVE-2015-7431

Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Design/Logic Flaw

IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...

CVE-2015-7437

Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors...

CVE-2015-7431

Cross-site scripting XSS vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-7438

CVE-2015-7438 affects IBM Sterling B2B Integrator 5.2. It describes a local information-disclosure flaw where a local attacker can obtain sensitive cleartext web-services information by leveraging database access. Documented in NVD/NIST and corroborated by multiple sources (CNVD, CVE lists). The ...

CVE-2015-7438

IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access...

CVE-2015-7431

CVE-2015-7431 is an XSS vulnerability in IBM Sterling B2B Integrator Queue Watcher (5.2). It results from improper validation of user-supplied input, enabling a remote attacker to craft a URL that injects script into a victim’s browser and potentially steal cookie-based credentials. Affected prod...

CVE-2015-7437

IBM Sterling B2B Integrator Queue Watcher in version 5.2 is affected by an information disclosure vulnerability that allows a local user to obtain sensitive information. The IBM Security Bulletin documents affected products as Sterling Integrator 5.1 and IBM Sterling B2B Integrator 5.2, with a CV...

PT-2016-1113 · Ibm +1 · Ibm Tivoli Common Reporting +7

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions affected versions not specified IBM Tivoli Common Reporting versions affected versions not specified IBM Sterling B2B Integrator versions affected versions not specified IBM Sterling Integrator versio...

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

Design/Logic Flaw

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-7410

IBM CVE-2015-7410 affects IBM Sterling B2B Integrator 5.2 (Health Check tool). The vulnerability is due to cookies not being properly handled with HTTPS sessions, enabling cookie hijacking via MITM-type scenarios. Affected product/version: IBM Sterling B2B Integrator 5.2. Remediation/fix: apply t...

IBM Sterling B2B Integrator Security Bypass Vulnerability

IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions and relationships. A security vulnerability exists in IBM Sterling B2B Integrator. An attacker could exploit the vulnerability to conduct a man-in-the-middle attack and obtain sensitive...

IBM Sterling B2B Integrator Local Information Disclosure Vulnerability (CNVD-2015-08354)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A local information disclosure vulnerability exists in IBM Sterling B2B Integrator. A local attacker could exploit the vulnerability to obtain sensitive...