Sterling B2b Integrator@* Security Vulnerabilities and Issues — Sterling B2b Integrator@* CVE List

Lucene search

IbmSterling B2b Integrator*

104 matches found

CVE•added 2019/06/25 4:15 p.m.•137 views

CVE-2019-4377

IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system. IBM X-Force ID: 162803.

4.3CVSS4.2AI score0.00224EPSS

CVE•added 2025/01/22 4:15 p.m.•109 views

CVE-2024-31903

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data.

8.8CVSS8.8AI score0.12905EPSS

CVE•added 2025/01/23 3:15 a.m.•91 views

CVE-2023-50309

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sess...

6.4CVSS5.9AI score0.00023EPSS

CVE•added 2025/01/23 3:15 a.m.•89 views

CVE-2023-32340

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

5.4CVSS5AI score0.00023EPSS

CVE•added 2023/01/04 6:15 p.m.•80 views

CVE-2022-22338

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 219510.

9.8CVSS7.9AI score0.00076EPSS

CVE•added 2023/01/04 6:15 p.m.•79 views

CVE-2022-43920

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control vulnerability in the Sftp server adapter. IBM X-Force ID: 241362.

8.8CVSS7.3AI score0.00073EPSS

CVE•added 2023/01/04 6:15 p.m.•78 views

CVE-2021-38928

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323.

5.4CVSS5.1AI score0.00069EPSS

CVE•added 2025/01/28 1:15 a.m.•73 views

CVE-2023-50316

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

9.8CVSS7.5AI score0.00059EPSS

CVE•added 2023/01/05 7:15 a.m.•67 views

CVE-2022-34330

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

6.1CVSS5.8AI score0.0013EPSS

CVE•added 2020/11/20 2:15 p.m.•66 views

CVE-2020-4937

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 191814.

7.5CVSS7.2AI score0.00112EPSS

CVE•added 2021/07/27 12:15 p.m.•66 views

CVE-2021-20562

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos...

5.4CVSS5.2AI score0.00874EPSS

CVE•added 2022/04/19 5:15 p.m.•66 views

CVE-2021-39033

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IB...

6.5CVSS6AI score0.00145EPSS

CVE•added 2025/01/06 4:15 p.m.•65 views

CVE-2024-31913

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

5.5CVSS5.3AI score0.00025EPSS

CVE•added 2022/05/17 5:15 p.m.•64 views

CVE-2022-22482

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977.

6.5CVSS6.2AI score0.00198EPSS

CVE•added 2023/01/04 6:15 p.m.•63 views

CVE-2022-22352

5.4CVSS5.2AI score0.00135EPSS

CVE•added 2023/01/04 6:15 p.m.•62 views

CVE-2022-22337

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user. IBM X-Force ID: 219507.

6.5CVSS4.9AI score0.00072EPSS

CVE•added 2018/07/20 4:29 p.m.•59 views

CVE-2018-1563

IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

5.4CVSS5.1AI score0.02417EPSS

CVE•added 2022/08/16 7:15 p.m.•59 views

CVE-2021-39085

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the ...

9.8CVSS9.3AI score0.00103EPSS

CVE•added 2022/06/30 5:15 p.m.•57 views

CVE-2021-38954

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414.

4.3CVSS4.2AI score0.00119EPSS

CVE•added 2022/08/16 7:15 p.m.•57 views

CVE-2021-39035

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lea...

5.4CVSS5.2AI score0.00069EPSS

CVE•added 2022/08/16 7:15 p.m.•57 views

CVE-2021-39087

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.

6.5CVSS6AI score0.0006EPSS

CVE•added 2025/01/31 4:15 p.m.•57 views

CVE-2024-45089

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an observable discrepancy.

4.3CVSS4.3AI score0.00037EPSS

CVE•added 2024/12/19 12:15 a.m.•56 views

CVE-2021-20553

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

5.4CVSS5.2AI score0.0005EPSS

CVE•added 2023/02/17 7:15 p.m.•56 views

CVE-2022-43579

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo...

5.4CVSS4.8AI score0.00135EPSS

CVE•added 2023/03/15 7:15 p.m.•56 views

CVE-2023-22876

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 244364.

6.5CVSS4.9AI score0.00072EPSS

CVE•added 2023/01/05 7:15 a.m.•55 views

CVE-2022-22371

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195.

6.5CVSS5.8AI score0.00024EPSS

CVE•added 2024/04/12 3:15 a.m.•53 views

CVE-2024-22357

IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wi...

5.4CVSS6AI score0.00135EPSS

CVE•added 2025/01/06 4:15 p.m.•53 views

CVE-2024-31914

6.4CVSS6AI score0.00043EPSS

CVE•added 2025/01/31 4:15 p.m.•52 views

CVE-2024-40696

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to creden...

5.4CVSS5.1AI score0.00022EPSS

CVE•added 2025/01/31 4:15 p.m.•52 views

CVE-2024-49807

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading ...

6.4CVSS5.9AI score0.00023EPSS

CVE•added 2019/03/05 6:29 p.m.•51 views

CVE-2019-4028

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2021/05/19 8:15 p.m.•51 views

CVE-2020-4646

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control.

4.3CVSS4.4AI score0.00119EPSS

CVE•added 2024/07/17 6:15 p.m.•51 views

CVE-2023-42010

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 could disclose sensitive information in the HTTP response using man in the middle techniques. IBM X-Force ID: 265507.

3.7CVSS3.5AI score0.00064EPSS

CVE•added 2025/01/28 1:15 a.m.•51 views

CVE-2024-27263

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man in the middle techniques.

5.3CVSS6.1AI score0.00024EPSS

CVE•added 2018/07/23 1:29 p.m.•49 views

CVE-2018-1513

IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.1AI score0.02716EPSS

CVE•added 2025/01/31 4:15 p.m.•49 views

CVE-2023-38739

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

8.8CVSS4.7AI score0.00017EPSS

CVE•added 2024/04/12 3:15 a.m.•49 views

CVE-2023-50307

5.4CVSS6AI score0.00099EPSS

CVE•added 2025/01/31 4:15 p.m.•49 views

CVE-2024-47116

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cr...

5.4CVSS5.3AI score0.00023EPSS

CVE•added 2025/01/31 4:15 p.m.•47 views

CVE-2024-47103

5.4CVSS5.1AI score0.00021EPSS

CVE•added 2023/11/22 7:15 p.m.•46 views

CVE-2023-25682

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 247034.

6.2CVSS5.2AI score0.00021EPSS

CVE•added 2021/10/07 6:15 p.m.•45 views

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.

4.3CVSS4.1AI score0.0005EPSS

CVE•added 2023/02/17 6:15 p.m.•45 views

CVE-2022-40232

IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.

8.8CVSS7.1AI score0.00048EPSS

CVE•added 2023/02/22 6:15 p.m.•45 views

CVE-2022-43578

5.4CVSS4.8AI score0.00092EPSS

CVE•added 2024/06/27 6:15 p.m.•45 views

CVE-2023-42014

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ...

5.4CVSS5.2AI score0.00042EPSS

CVE•added 2019/11/26 4:15 p.m.•44 views

CVE-2019-4387

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 162715.

8.8CVSS8.6AI score0.00339EPSS

CVE•added 2023/02/17 7:15 p.m.•44 views

CVE-2022-40231

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 235533.

8.8CVSS6.1AI score0.00058EPSS

CVE•added 2024/02/09 1:15 a.m.•44 views

CVE-2023-42016

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the us...

4.3CVSS4.2AI score0.00033EPSS

CVE•added 2024/02/09 1:15 a.m.•43 views

CVE-2023-32341

IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 255827.

6.5CVSS6.2AI score0.00036EPSS

CVE•added 2023/11/22 4:15 a.m.•42 views

CVE-2022-35638

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230824.

8.8CVSS6.4AI score0.00041EPSS

CVE•added 2021/10/07 6:15 p.m.•41 views

CVE-2021-20376

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.

4.3CVSS4.3AI score0.00119EPSS

Total number of security vulnerabilities104