2450 matches found
CVE-2013-5406
IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by CVE-2013-5406 (Windows MHTML cross-site scripting). The vulnerability involves XSS via unspecified parameters, enabling a remote attacker to inject script through interactions with the Windows MHTML protocol handler...
CVE-2013-5409
IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by SQL Injection. An authenticated remote attacker could send crafted SQL statements to various screens, enabling view/add/modify/delete data in back-end DB. For affected versions, remediation is available: apply Fix P...
CVE-2013-5407
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue...
CVE-2013-5407
CVE-2013-5407 affects IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 (and older 5.1/2.1 with 2.1). The frame injection vulnerability allows a remote attacker to use crafted web content to bypass access restrictions or access sensitive information by abusing FRAME elements. The ...
CVE-2013-3626
Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator VHI 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message...
Directory traversal
Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator VHI 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message...
CVE-2013-3626
Vulnerability CVE-2013-3626 affects Attachmate Verastream Host Integrator (VHI) Session Server. A directory traversal flaw in VHI 6.0 to 7.5 SP 1 HF 1 allows unauthenticated remote attackers to upload and execute arbitrary files via a crafted message, potentially gaining full server control. A ho...
CVE-2013-3626
Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator VHI 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message...
Attachmate Verastream Host Integrator (VHI) allows arbitrary file upload and execution
Overview The Attachmate Verastream Host Integrator VHI is vulnerable to arbitrary file uploads and execution. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' - CVE-2013-3626The Attachmate VHI Session Server, on all platforms, allows unauthenticated...
CVE-2013-0494
IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...
Design/Logic Flaw
IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...
CVE-2013-0494
IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...
CVE-2013-0494
Summary of CVE-2013-0494 : IBM Sterling B2B Integrator (versions 5.0 and 5.1; and related components like Sterling File Gateway 2.1/2.2) is affected by an HTTP Byte Range denial-of-service vulnerability. A remote, unauthenticated attacker can trigger memory and CPU exhaustion by sending specially...
Sybase EAServer 6.3.1 - Multiple Vulnerabilities
Sybase EAServer fully supports all the Web services standards and enables enterprises to rapidly expose business functions as Web services. EAServer also provides a graphical interface to automate the publication and management of your company’s Web services. Today, EAServer supports EJB and...
CVE-2013-2984
Directory traversal vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to read or modify files via unspecified vectors...
CVE-2013-0481
The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering 1 an error or 2 an exception...
CVE-2013-0558
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors...
CVE-2013-2987
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-3020, CVE-2013-0568,...
CVE-2013-0567
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...
CVE-2013-0568
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...