Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
IbmSterling B2b Integrator

179 matches found

CVE
CVE•added 2013/04/12 7:55 p.m.•45 views

CVE-2012-5937

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors.

9.3CVSS7.7AI score0.01492EPSS
CVE
CVE•added 2017/06/23 4:29 p.m.•45 views

CVE-2017-1131

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. IBM X-Force ID: 121375.

6.5CVSS6AI score0.00188EPSS
CVE
CVE•added 2017/06/23 4:29 p.m.•45 views

CVE-2017-1347

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126462.

8.8CVSS8.6AI score0.00615EPSS
CVE
CVE•added 2019/04/25 3:29 p.m.•45 views

CVE-2019-4222

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to view process definition of a business process without permission. IBM X-Force ID: 159231.

4.3CVSS4.3AI score0.00132EPSS
CVE
CVE•added 2021/10/07 6:15 p.m.•45 views

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.

4.3CVSS4.1AI score0.0005EPSS
CVE
CVE•added 2023/02/17 6:15 p.m.•45 views

CVE-2022-40232

IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.

8.8CVSS7.1AI score0.00048EPSS
CVE
CVE•added 2023/02/22 6:15 p.m.•45 views

CVE-2022-43578

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo...

5.4CVSS4.8AI score0.00092EPSS
CVE
CVE•added 2024/06/27 6:15 p.m.•45 views

CVE-2023-42014

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ...

5.4CVSS5.2AI score0.00042EPSS
CVE
CVE•added 2013/12/21 2:22 p.m.•44 views

CVE-2013-5405

Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.

3.5CVSS5.3AI score0.0018EPSS
CVE
CVE•added 2015/10/06 1:59 a.m.•44 views

CVE-2015-4992

IBM Sterling B2B Integrator 5.2 before 5020500_8 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.

3.5CVSS6.2AI score0.00134EPSS
CVE
CVE•added 2016/11/30 11:59 a.m.•44 views

CVE-2016-5890

IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote authenticated users to change arbitrary passwords via unspecified vectors.

5.3CVSS4.9AI score0.00164EPSS
CVE
CVE•added 2017/06/23 4:29 p.m.•44 views

CVE-2017-1193

IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request. IBM X-Force ID: 123667.

6.5CVSS6AI score0.00285EPSS
CVE
CVE•added 2017/06/22 6:29 p.m.•44 views

CVE-2017-1326

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

4.3CVSS4.3AI score0.00141EPSS
CVE
CVE•added 2019/11/26 4:15 p.m.•44 views

CVE-2019-4387

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 162715.

8.8CVSS8.6AI score0.00339EPSS
CVE
CVE•added 2023/02/17 7:15 p.m.•44 views

CVE-2022-40231

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 235533.

8.8CVSS6.1AI score0.00058EPSS
CVE
CVE•added 2024/02/09 1:15 a.m.•44 views

CVE-2023-42016

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the us...

4.3CVSS4.2AI score0.00033EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•43 views

CVE-2012-5766

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than CVE-2013-056...

6.5CVSS8AI score0.00302EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•43 views

CVE-2013-0463

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, CVE-201...

4CVSS5.4AI score0.00179EPSS
CVE
CVE•added 2019/04/25 3:29 p.m.•43 views

CVE-2019-4074

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.2AI score0.00158EPSS
CVE
CVE•added 2024/02/09 1:15 a.m.•43 views

CVE-2023-32341

IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 255827.

6.5CVSS6.2AI score0.00036EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•42 views

CVE-2013-0568

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-201...

4CVSS5.4AI score0.00179EPSS
CVE
CVE•added 2017/06/23 4:29 p.m.•42 views

CVE-2017-1132

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1...

5.4CVSS5.5AI score0.00269EPSS
CVE
CVE•added 2017/06/23 4:29 p.m.•42 views

CVE-2017-1349

IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local user. IBM X-Force ID: 126525.

5.5CVSS4.9AI score0.00057EPSS
CVE
CVE•added 2023/11/22 4:15 a.m.•42 views

CVE-2022-35638

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230824.

8.8CVSS6.4AI score0.00041EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•41 views

CVE-2013-0468

Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-2983.

3.5CVSS5.2AI score0.00166EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•41 views

CVE-2013-0558

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors.

5CVSS6.1AI score0.00275EPSS
CVE
CVE•added 2018/04/20 9:29 p.m.•41 views

CVE-2014-0912

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page. IBM X-Force ID: 92072.

5.3CVSS5.5AI score0.00172EPSS
CVE
CVE•added 2016/01/01 5:59 a.m.•41 views

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.

7.4CVSS6.9AI score0.00227EPSS
CVE
CVE•added 2017/12/07 3:29 p.m.•41 views

CVE-2017-1482

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1...

5.4CVSS5.2AI score0.0025EPSS
CVE
CVE•added 2021/10/07 6:15 p.m.•41 views

CVE-2021-20376

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.

4.3CVSS4.3AI score0.00119EPSS
CVE
CVE•added 2024/04/12 3:15 a.m.•41 views

CVE-2023-45186

IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials d...

5.4CVSS6AI score0.0009EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•40 views

CVE-2013-0476

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to inject arbitrary FTP commands via unspecified vectors.

6.4CVSS7AI score0.00218EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•40 views

CVE-2013-2985

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, CVE-201...

4CVSS5.4AI score0.00179EPSS
CVE
CVE•added 2013/12/21 2:22 p.m.•40 views

CVE-2013-5406

Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler.

3.5CVSS5.3AI score0.0018EPSS
CVE
CVE•added 2013/12/21 2:22 p.m.•40 views

CVE-2013-5409

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

6.5CVSS8.1AI score0.00314EPSS
CVE
CVE•added 2016/01/02 9:59 p.m.•40 views

CVE-2015-7437

Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors.

5.5CVSS4.9AI score0.00042EPSS
CVE
CVE•added 2018/07/20 4:29 p.m.•40 views

CVE-2018-1564

IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages. IBM X-Force ID: 142968.

6.7CVSS6.1AI score0.00046EPSS
CVE
CVE•added 2019/03/05 6:29 p.m.•40 views

CVE-2019-4027

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID:...

5.4CVSS5.2AI score0.00229EPSS
CVE
CVE•added 2021/10/07 6:15 p.m.•40 views

CVE-2021-20584

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397.

7.5CVSS7.3AI score0.00134EPSS
CVE
CVE•added 2021/10/06 5:15 p.m.•40 views

CVE-2021-38925

IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171.

7.5CVSS7.2AI score0.00112EPSS
CVE
CVE•added 2013/07/02 2:12 p.m.•39 views

CVE-2013-0455

Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.7AI score0.00236EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•39 views

CVE-2013-0475

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-201...

4CVSS5.4AI score0.00179EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•39 views

CVE-2013-0567

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-201...

4CVSS5.4AI score0.00179EPSS
CVE
CVE•added 2013/07/03 1:54 p.m.•39 views

CVE-2013-2982

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors.

6.5CVSS6.4AI score0.00349EPSS
CVE
CVE•added 2013/12/21 2:22 p.m.•39 views

CVE-2013-5413

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation.

4.3CVSS7AI score0.00265EPSS
CVE
CVE•added 2017/12/07 3:29 p.m.•39 views

CVE-2017-1481

IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user. IBM X-Force ID: 128619.

4.3CVSS4.1AI score0.00177EPSS
CVE
CVE•added 2019/03/05 6:29 p.m.•39 views

CVE-2019-4029

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID...

5.4CVSS5.2AI score0.00229EPSS
CVE
CVE•added 2019/03/05 6:29 p.m.•39 views

CVE-2019-4063

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.

5.9CVSS5.4AI score0.00134EPSS
CVE
CVE•added 2020/10/20 3:15 p.m.•39 views

CVE-2019-4680

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171733.

8.8CVSS8.6AI score0.00468EPSS
CVE
CVE•added 2021/10/07 6:15 p.m.•39 views

CVE-2021-20571

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-F...

5.4CVSS5.1AI score0.00204EPSS
Total number of security vulnerabilities179