Sterling B2b Integrator@6.0.0.0 Security Vulnerabilities and Issues — Sterling B2b Integrator@6.0.0.0 CVE List

Lucene search

IbmSterling B2b Integrator6.0.0.0

42 matches found

CVE•added 2019/06/25 4:15 p.m.•137 views

CVE-2019-4377

IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system. IBM X-Force ID: 162803.

4.3CVSS4.2AI score0.00224EPSS

CVE•added 2022/04/19 5:15 p.m.•66 views

CVE-2021-39033

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IB...

6.5CVSS6AI score0.00145EPSS

CVE•added 2022/05/17 5:15 p.m.•64 views

CVE-2022-22482

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977.

6.5CVSS6.2AI score0.00198EPSS

CVE•added 2019/04/25 3:29 p.m.•60 views

CVE-2019-4148

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.2AI score0.00162EPSS

CVE•added 2022/08/16 7:15 p.m.•59 views

CVE-2021-39085

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the ...

9.8CVSS9.3AI score0.00103EPSS

CVE•added 2022/06/30 5:15 p.m.•57 views

CVE-2021-38954

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414.

4.3CVSS4.2AI score0.00119EPSS

CVE•added 2022/08/16 7:15 p.m.•57 views

CVE-2021-39035

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lea...

5.4CVSS5.2AI score0.00069EPSS

CVE•added 2022/08/16 7:15 p.m.•57 views

CVE-2021-39087

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.

6.5CVSS6AI score0.0006EPSS

CVE•added 2019/03/05 6:29 p.m.•51 views

CVE-2019-4028

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2021/05/19 8:15 p.m.•51 views

CVE-2020-4646

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control.

4.3CVSS4.4AI score0.00119EPSS

CVE•added 2019/04/25 3:29 p.m.•46 views

CVE-2019-4073

5.4CVSS5.2AI score0.00277EPSS

CVE•added 2019/04/25 3:29 p.m.•45 views

CVE-2019-4222

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to view process definition of a business process without permission. IBM X-Force ID: 159231.

4.3CVSS4.3AI score0.00132EPSS

CVE•added 2021/10/07 6:15 p.m.•45 views

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.

4.3CVSS4.1AI score0.0005EPSS

CVE•added 2019/11/26 4:15 p.m.•44 views

CVE-2019-4387

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 162715.

8.8CVSS8.6AI score0.00339EPSS

CVE•added 2019/04/25 3:29 p.m.•43 views

CVE-2019-4074

5.4CVSS5.2AI score0.00158EPSS

CVE•added 2019/03/05 6:29 p.m.•40 views

CVE-2019-4027

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2019/03/05 6:29 p.m.•39 views

CVE-2019-4029

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2019/03/05 6:29 p.m.•39 views

CVE-2019-4063

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.

5.9CVSS5.4AI score0.00134EPSS

CVE•added 2021/10/07 6:15 p.m.•39 views

CVE-2021-20571

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-F...

5.4CVSS5.1AI score0.00204EPSS

CVE•added 2019/04/25 3:29 p.m.•38 views

CVE-2019-4076

5.4CVSS5.2AI score0.00158EPSS

CVE•added 2019/04/25 3:29 p.m.•38 views

CVE-2019-4077

5.4CVSS5.2AI score0.00158EPSS

CVE•added 2019/04/25 3:29 p.m.•38 views

CVE-2019-4146

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to obtain sensitive document information under unusual circumstances. IBM X-Force ID: 158401.

3.5CVSS3.7AI score0.00225EPSS

CVE•added 2022/04/08 4:15 p.m.•38 views

CVE-2020-4668

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186283.

8.8CVSS8.3AI score0.00109EPSS

CVE•added 2019/05/01 4:29 p.m.•37 views

CVE-2019-4258

IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2021/01/05 3:15 p.m.•37 views

CVE-2019-4728

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this v...

9CVSS8.7AI score0.18363EPSS

CVE•added 2020/12/10 11:15 p.m.•37 views

CVE-2019-4738

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.

6.5CVSS6AI score0.00076EPSS

CVE•added 2020/11/16 5:15 p.m.•37 views

CVE-2020-4671

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284.

6.5CVSS6AI score0.00243EPSS

CVE•added 2021/01/05 3:15 p.m.•37 views

CVE-2020-4761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against th...

5.3CVSS4.9AI score0.00177EPSS

CVE•added 2019/04/25 3:29 p.m.•36 views

CVE-2019-4075

5.4CVSS5.2AI score0.00208EPSS

CVE•added 2021/01/05 3:15 p.m.•36 views

CVE-2020-4762

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896.

8.8CVSS8AI score0.00584EPSS

CVE•added 2019/04/02 2:29 p.m.•35 views

CVE-2019-4043

IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239.

7.1CVSS6.8AI score0.00688EPSS

CVE•added 2021/10/06 5:15 p.m.•34 views

CVE-2021-29836

IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...

5.4CVSS5.2AI score0.00215EPSS

CVE•added 2020/11/16 5:15 p.m.•33 views

CVE-2020-4692

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force ID: 186780.

6.5CVSS6AI score0.00211EPSS

CVE•added 2021/10/06 5:15 p.m.•33 views

CVE-2021-29798

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734.

9.8CVSS9.2AI score0.00358EPSS

CVE•added 2021/10/06 5:15 p.m.•32 views

CVE-2021-29761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265.

4.3CVSS4.1AI score0.00119EPSS

CVE•added 2020/11/16 5:15 p.m.•31 views

CVE-2020-4475

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

6.5CVSS6.1AI score0.00152EPSS

CVE•added 2020/11/16 5:15 p.m.•31 views

CVE-2020-4700

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a user or group with administrative privileges. IBM X-Force ID: 187077.

8.8CVSS8.2AI score0.00584EPSS

CVE•added 2019/04/25 3:29 p.m.•30 views

CVE-2018-1720

IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 147294.

7.5CVSS7.2AI score0.00096EPSS

CVE•added 2020/11/16 5:15 p.m.•30 views

CVE-2020-4566

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083.

6.5CVSS5.9AI score0.00243EPSS

CVE•added 2021/10/06 5:15 p.m.•29 views

CVE-2021-29758

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.

4.3CVSS4.3AI score0.00133EPSS

CVE•added 2021/10/06 5:15 p.m.•27 views

CVE-2021-29760

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213.

5.4CVSS4.3AI score0.00119EPSS

CVE•added 2020/11/16 5:15 p.m.•24 views

CVE-2020-4655

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-F...

8.8CVSS8.7AI score0.00372EPSS