Lucene search
+L

2560 matches found

CNNVD
CNNVD
added 2025/01/23 12:00 a.m.13 views

IBM Sterling B2B Integrator 跨站脚本漏洞

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions, and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting...

5.4CVSS5.9AI score0.00223EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/01/23 12:00 a.m.24 views

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2025-02530)

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffe...

5.5CVSS6.3AI score0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/22 4:15 p.m.11 views

CVE-2024-31903

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data...

8.8CVSS6.1AI score0.00968EPSS
SaveExploits1References1
NVD
NVD
added 2025/01/22 4:15 p.m.31 views

CVE-2024-31903

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data...

8.8CVSS0.00968EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/01/22 4:08 p.m.42 views

CVE-2024-31903 IBM Sterling B2B Integrator Standard Edition code execution

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data...

8.8CVSS0.00968EPSS
SaveExploits1References1
CVE
CVE
added 2025/01/22 4:08 p.m.150 views

CVE-2024-31903

CVE-2024-31903 affects IBM Sterling B2B Integrator Standard Edition: versions 6.0.0.0–6.1.2.5 and 6.2.0.0–6.2.0.2 are vulnerable to deserialization of untrusted data, enabling arbitrary code execution on the local network. A GitHub PoC demonstrates pre-auth deserialization RCE (and LPE-injection ...

8.8CVSS8.8AI score0.00968EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/01/22 12:00 a.m.13 views

IBM Sterling B2B Integrator 代码问题漏洞

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions, and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A code issue vulnerability exist...

8.8CVSS7.3AI score0.00968EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:00 a.m.13 views

The vulnerability of the web interface of the IBM Sterling B2B Integrator software allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the web interface of the IBM Sterling B2B Integrator software solution relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain unauthorized access to protected...

5.5CVSS6AI score0.00245EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/01/06 4:15 p.m.17 views

CVE-2024-31914

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...

6.4CVSS5.5AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/06 4:15 p.m.9 views

CVE-2024-31913

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...

5.4CVSS5.5AI score0.00221EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/06 4:15 p.m.33 views

CVE-2024-31913

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...

5.5CVSS0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/06 4:02 p.m.94 views

CVE-2024-31914

IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.1.2.5 and 6.2.0.0–6.2.0.2) is affected by stored cross-site scripting (XSS) in the Web UI, allowing an attacker to embed arbitrary JavaScript that can alter functionality and potentially disclose credentials within a trusted session...

6.4CVSS6AI score0.00245EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/06 4:02 p.m.30 views

CVE-2024-31914 IBM Sterling B2B Integrator cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...

6.4CVSS0.00245EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/06 4:02 p.m.12 views

CVE-2024-31914 IBM Sterling B2B Integrator cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...

6.4CVSS6AI score0.00245EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/06 4:02 p.m.96 views

CVE-2024-31913

CVE-2024-31913 affects IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.1.2.5 and 6.2.0.0–6.2.0.2) and describes a Stored XSS in the Web UI that can lead to credentials disclosure within a trusted session. The underlying issue is cross-site scripting via the Web UI, enabling an at...

5.5CVSS5.3AI score0.00221EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/06 4:02 p.m.13 views

CVE-2024-31913 IBM Sterling B2B Integrator cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...

5.5CVSS6.1AI score0.00221EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/06 4:02 p.m.37 views

CVE-2024-31913 IBM Sterling B2B Integrator cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...

5.5CVSS0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/06 12:00 a.m.10 views

IBM Sterling B2B Integrator 跨站脚本漏洞

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffe...

5.5CVSS6.1AI score0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/06 12:00 a.m.16 views

IBM Sterling B2B Integrator 跨站脚本漏洞

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions, and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting...

6.4CVSS6AI score0.00245EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/12/25 12:00 a.m.59 views

IBM Security Directory Integrator Operating System Command Injection Vulnerability

IBM Security Directory Integrator is an integrated development environment and runtime service from International Business Machines IBM. IBM Security Directory Integrator suffers from an operating system command injection vulnerability that stems from the application's failure to properly filter...

8.8CVSS7.7AI score0.00653EPSS
SaveExploits0References1
Rows per page
Query Builder