Cross site scripting

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...

Cross site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2018-1720

IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.36, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 147294...

CVE-2019-4033

IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155999...

CVE-2019-4238

CVE-2019-4238 affects IBM InfoSphere Information Server and related components. Listed vulnerable products include IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7, with a cross-site scripting vulnerability that can cause arbitrary JavaScript execution in the Web UI and potential c...

CVE-2019-4076

CVE-2019-4076 affects IBM Sterling B2B Integrator Standard Edition. The vulnerability is a cross-site scripting (XSS) issue in the Web UI that could allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected products/versions...

CVE-2019-4077

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4075

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1 are affected by CVE-2019-4075, a cross-site scripting vulnerability in the Web UI that can enable embedding arbitrary JavaScript and potentially expose credentials in a trusted session. The NVD/IBM notes the vulnerability with ...

CVE-2019-4033

IBM Content Navigator versions 2.0.3 and 3.0 CD are vulnerable to cross-site scripting (XSS) via the Web UI, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. The root cause is an XSS flaw in the web interface that processes client-s...

CVE-2019-4073

IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.0.0.1) is affected by a cross-site scripting vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Connected advisories/records confirm the is...

CVE-2019-4073

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2018-1720

IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.36, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 147294...

CVE-2019-4074

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4238

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...

CVE-2019-4092

IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

CVE-2018-1720

CVE-2018-1720 affects IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1. Root cause: use of weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Impact (as stated): partial confidentiality loss; no ...

CVE-2019-4148

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2019-4148

IBM Sterling B2B Integrator Standard Edition CVE-2019-4148 is a cross‑site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected versions span IBM Sterling B2B Integrator Standard Editi...

CVE-2019-4077

CVE-2019-4077 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1. Description: cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript and potentially lead to credentials disclosure within a trusted session. Root cause indicated by sources is ...

CVE-2019-4146

CVE-2019-4146 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1 . The vulnerability is an information disclosure that could allow an authenticated user to obtain sensitive document information under unusual circumstances. The IBM security bulletin for this CVE (and CVE...