Sterling B2b Integrator Security Vulnerabilities and Issues — Page 3 of Sterling B2b Integrator CVE List

Lucene search

IbmSterling B2b Integrator

179 matches found

CVE•added 2021/10/06 5:15 p.m.•39 views

CVE-2021-29764

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-F...

6.4CVSS5.1AI score0.00287EPSS

CVE•added 2013/07/03 1:54 p.m.•38 views

CVE-2012-5936

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

5CVSS6.5AI score0.00275EPSS

CVE•added 2013/07/03 1:54 p.m.•38 views

CVE-2013-0481

The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering (1) an error or (2) an exception.

5CVSS6.6AI score0.00275EPSS

CVE•added 2013/08/09 11:55 p.m.•38 views

CVE-2013-0494

IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header.

5CVSS6.7AI score0.0178EPSS

CVE•added 2013/12/21 2:22 p.m.•38 views

CVE-2013-5411

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors.

4.3CVSS6.7AI score0.00246EPSS

CVE•added 2017/06/22 6:29 p.m.•38 views

CVE-2016-9982

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274.

6.5CVSS6AI score0.00285EPSS

CVE•added 2017/08/10 3:29 p.m.•38 views

CVE-2017-1174

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296.

8.8CVSS8.6AI score0.00615EPSS

CVE•added 2017/07/31 9:29 p.m.•38 views

CVE-2017-1496

IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.2AI score0.00198EPSS

CVE•added 2019/04/25 3:29 p.m.•38 views

CVE-2019-4076

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.2AI score0.00158EPSS

CVE•added 2019/04/25 3:29 p.m.•38 views

CVE-2019-4077

5.4CVSS5.2AI score0.00158EPSS

CVE•added 2019/04/25 3:29 p.m.•38 views

CVE-2019-4146

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to obtain sensitive document information under unusual circumstances. IBM X-Force ID: 158401.

3.5CVSS3.7AI score0.00225EPSS

CVE•added 2020/02/24 4:15 p.m.•38 views

CVE-2019-4595

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed ...

6.8CVSS5.8AI score0.0019EPSS

CVE•added 2020/05/14 4:15 p.m.•38 views

CVE-2020-4299

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request. IBM X-Force ID: 176606.

4.3CVSS4.2AI score0.00077EPSS

CVE•added 2022/04/08 4:15 p.m.•38 views

CVE-2020-4668

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186283.

8.8CVSS8.3AI score0.00109EPSS

CVE•added 2013/07/03 1:54 p.m.•37 views

CVE-2013-0479

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename.

4CVSS6.2AI score0.00121EPSS

CVE•added 2013/07/02 2:12 p.m.•37 views

CVE-2013-2983

Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling File Gateway 2.2 and Sterling B2B Integrator allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2013-0468.

3.5CVSS5.3AI score0.00166EPSS

CVE•added 2013/12/21 2:22 p.m.•37 views

CVE-2013-5407

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue.

4.9CVSS5.8AI score0.00154EPSS

CVE•added 2014/10/26 6:55 p.m.•37 views

CVE-2014-6099

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach.

5CVSS6.5AI score0.00278EPSS

CVE•added 2016/01/02 9:59 p.m.•37 views

CVE-2015-7438

IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access.

4.7CVSS4.3AI score0.00042EPSS

CVE•added 2017/06/23 4:29 p.m.•37 views

CVE-2017-1348

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1...

5.4CVSS5.5AI score0.00269EPSS

CVE•added 2019/05/01 4:29 p.m.•37 views

CVE-2019-4258

IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2021/01/05 3:15 p.m.•37 views

CVE-2019-4728

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this v...

9CVSS8.7AI score0.18363EPSS

CVE•added 2020/12/10 11:15 p.m.•37 views

CVE-2019-4738

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.

6.5CVSS6AI score0.00076EPSS

CVE•added 2020/05/13 1:15 p.m.•37 views

CVE-2020-4312

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page. IBM X-Force ID: 177089.

4.3CVSS4.1AI score0.00156EPSS

CVE•added 2020/11/16 5:15 p.m.•37 views

CVE-2020-4671

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284.

6.5CVSS6AI score0.00243EPSS

CVE•added 2021/01/05 3:15 p.m.•37 views

CVE-2020-4761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against th...

5.3CVSS4.9AI score0.00177EPSS

CVE•added 2021/10/06 5:15 p.m.•37 views

CVE-2021-29903

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 207506.

9.8CVSS9.2AI score0.00358EPSS

CVE•added 2025/03/11 5:16 p.m.•37 views

CVE-2024-56338

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to creden...

4.8CVSS4.9AI score0.00048EPSS

CVE•added 2016/01/02 9:59 p.m.•36 views

CVE-2015-7431

Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

6.1CVSS5.8AI score0.00225EPSS

CVE•added 2016/11/30 11:59 a.m.•36 views

CVE-2016-3057

Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS5.8AI score0.00264EPSS

CVE•added 2017/06/22 6:29 p.m.•36 views

CVE-2016-9983

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275.

5.3CVSS5.2AI score0.00285EPSS

CVE•added 2018/07/31 1:29 p.m.•36 views

CVE-2018-1718

IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.2AI score0.00214EPSS

CVE•added 2019/04/25 3:29 p.m.•36 views

CVE-2019-4075

5.4CVSS5.2AI score0.00208EPSS

CVE•added 2021/01/05 3:15 p.m.•36 views

CVE-2020-4762

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896.

8.8CVSS8AI score0.00584EPSS

CVE•added 2015/01/10 2:59 a.m.•35 views

CVE-2014-6199

The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request.

5CVSS6.6AI score0.01879EPSS

CVE•added 2017/08/02 7:29 p.m.•35 views

CVE-2015-0194

XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.

6.5CVSS6.2AI score0.00194EPSS

CVE•added 2017/02/08 10:59 p.m.•35 views

CVE-2016-0210

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP respon...

5.3CVSS4.9AI score0.00352EPSS

CVE•added 2017/06/23 4:29 p.m.•35 views

CVE-2016-5893

IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 115336.

5.5CVSS4.8AI score0.00067EPSS

CVE•added 2018/07/20 4:29 p.m.•35 views

CVE-2017-1633

IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests. IBM X-Force ID: 133180.

4.3CVSS4.6AI score0.00264EPSS

CVE•added 2018/07/20 4:29 p.m.•35 views

CVE-2018-1679

IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 145180.

5.3CVSS5.2AI score0.00191EPSS

CVE•added 2019/04/02 2:29 p.m.•35 views

CVE-2019-4043

IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239.

7.1CVSS6.8AI score0.00688EPSS

CVE•added 2020/02/26 4:15 p.m.•35 views

CVE-2019-4596

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

5.4CVSS5.2AI score0.00239EPSS

CVE•added 2020/10/20 3:15 p.m.•35 views

CVE-2020-4564

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le...

5.4CVSS5.2AI score0.00259EPSS

CVE•added 2021/10/07 6:15 p.m.•35 views

CVE-2021-20372

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518.

4.3CVSS4.3AI score0.00268EPSS

CVE•added 2021/10/06 5:15 p.m.•35 views

CVE-2021-29837

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204913.

8.8CVSS8.4AI score0.00109EPSS

CVE•added 2013/07/03 1:54 p.m.•34 views

CVE-2013-2987

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-3020, CVE-2013-0568, CVE-201...

4CVSS5.4AI score0.00179EPSS

CVE•added 2014/11/08 11:55 a.m.•34 views

CVE-2014-6146

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.

1.9CVSS5.7AI score0.00061EPSS

CVE•added 2017/08/10 3:29 p.m.•34 views

CVE-2017-1192

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663.

8.2CVSS8AI score0.00528EPSS

CVE•added 2021/10/06 5:15 p.m.•34 views

CVE-2021-29836

IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...

5.4CVSS5.2AI score0.00215EPSS

CVE•added 2013/07/03 1:54 p.m.•33 views

CVE-2013-0539

An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack.

5CVSS6.5AI score0.00275EPSS

Total number of security vulnerabilities179