CVE-2019-4537

IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 165593...

Cross site request forgery (csrf)

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172363...

Cross site scripting

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Sql injection

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167881...

CVE-2019-4598

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167881...

CVE-2019-4726

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172363...

CVE-2019-4598

CVE-2019-4598 pertains to a SQL injection vulnerability in the IBM Sterling B2B Integrator Dashboard User Interface for Standard Edition, affecting versions 5.2.0.0 through 6.0.3.0. The underlying issue enables an attacker to send crafted SQL statements via the dashboard, with potential exposure ...

CVE-2019-4726

IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–5.2.6.5) is vulnerable to cross-site request forgery, potentially allowing an attacker to execute malicious, unauthorized actions on behalf of a trusted user. The IBM bulletin confirms the CVE-2019-4726 issue and lists affected versio...

CVE-2019-4596

CVE-2019-4596 affects IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–5.2.6.5) and the Dashboard Web UI, where a stored/reflected cross-site scripting vulnerability allows embedding arbitrary JavaScript that can alter UI behavior and potentially leak credentials within a trusted se...

CVE-2019-4597

IBM Sterling B2B Integrator Standard Edition is affected by CVE-2019-4597: SQL injection in versions 5.2.0.0 to 6.0.3.0 (per IBM advisory). A remote attacker could execute specially crafted SQL to view, add, modify, or delete data in the back-end database. CVSS v3.1 base score 6.3 (medium). Remed...

CVE-2019-4596

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2019-4597

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167880...

CVE-2019-4537

IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 165593...

CVE-2019-4557

IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 166206...

Code injection

IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 166206...

Code injection

IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 171438...

CVE-2019-4672

IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 171438...

CVE-2019-4557

IBM QRadar Advisor With Watson App for IBM QRadar SIEM (versions 1.1–2.5) is affected by CVE-2019-4557 due to the use of weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information stored in the app. The IBM security bulletin (A4C6...): rem...

CVE-2020-4210

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175020...

CVE-2020-4211

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175022...