CVE-2013-2982

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors...

CVE-2013-0539

An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack...

CVE-2013-0468

IBM Sterling CVE-2013-0468 describes a cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1/5.2 and Sterling File Gateway 2.1/2.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, potentially impacting browser conte...

CVE-2013-0476

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to inject arbitrary FTP commands via unspecified vectors...

CVE-2013-0463

CVE-2013-0463 is an Information Disclosure vulnerability affecting IBM Sterling B2B Integrator 5.0–5.2 and IBM Sterling File Gateway 2.0–2.2. Remote authenticated users could obtain sensitive information about application implementation via unspecified vectors. IBM’s bulletin lists multiple fixes...

CVE-2013-0479

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename...

CVE-2013-0468

Cross-site scripting XSS vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-2983...

CVE-2013-0539

The CVE-2013-0539 entry involves an insufficient Session-ID length in a third-party component used by IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). Root cause: short session identifiers enable brute-force session guessing, allowing potential sess...

CVE-2013-0560

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766...

CVE-2013-2984

Path traversal vulnerability CVE-2013-2984 affects IBM Sterling B2B Integrator 5.1/5.2 and IBM Sterling File Gateway 2.1/2.2. The IBM security bulletin describes that a path traversal could allow a remote authenticated attacker to read or modify restricted files. Affected product versions are exp...

CVE-2013-3020

CVE-2013-3020 is an Information Disclosure vulnerability in IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (versions 2.1/2.2/2.0). The IBM bulletin attributes this to disclosure of application implementation details via unspecified vectors. Affected products/vers...

CVE-2013-0475

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

CVE-2013-3020

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-0568,...

CVE-2013-2985

CVE-2013-2985 is an information-disclosure vulnerability affecting IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). An authenticated remote user could obtain sensitive information about the application implementation via unspecified vectors. The IBM...

CVE-2013-0456

CVE-2013-0456 affects IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2). The connected IBM Security Bulletin confirms a session hijacking risk via a modified cookie path, describing it as an authenticated remote-access issue. Public details list affected products/versi...

CVE-2013-2982

CVE-2013-2982 affects IBM Sterling B2B Integrator (versions 5.1–5.2) and IBM Sterling File Gateway (2.1–2.2). It is an Unrestricted File Upload vulnerability that authenticated remote users can exploit to upload arbitrary files via unspecified vectors, potentially aiding other attacks. IBM’s Secu...

CVE-2013-0568

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

CVE-2013-0479

CVE-2013-0479 affects IBM Sterling B2B Integrator (5.2, 5.1, 5.0) and IBM Sterling File Gateway (2.2, 2.1, 2.0); the flaw is File Type/Extension Manipulation due to insufficient validation, allowing remote authenticated users to bypass access restrictions via crafted filenames. Remediation is ava...

CVE-2013-0481

CVE-2013-0481 affects IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). The issue: errors or exceptions in the console processing may cause stack traces to be displayed in responses, potentially exposing internal implementation details. The CVE is do...

CVE-2013-2987

CVE-2013-2987 is part of an Information Disclosure family affecting IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (versions 2.2/2.1/2.0). The connected IBM Security Bulletin documents multiple vulnerabilities with this family, including 2987, describing that rem...