Sterling B2b Integrator@6.0.3.4 Security Vulnerabilities and Issues — Sterling B2b Integrator@6.0.3.4 CVE List

Lucene search

IbmSterling B2b Integrator6.0.3.4

12 matches found

CVE•added 2021/10/07 6:15 p.m.•45 views

CVE-2021-29700

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.

4.3CVSS4.1AI score0.0005EPSS

CVE•added 2021/10/06 5:15 p.m.•40 views

CVE-2021-38925

IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171.

7.5CVSS7.2AI score0.00112EPSS

CVE•added 2021/10/07 6:15 p.m.•39 views

CVE-2021-20571

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-F...

5.4CVSS5.1AI score0.00204EPSS

CVE•added 2021/10/06 5:15 p.m.•39 views

CVE-2021-29764

6.4CVSS5.1AI score0.00287EPSS

CVE•added 2021/10/06 5:15 p.m.•37 views

CVE-2021-29903

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 207506.

9.8CVSS9.2AI score0.00358EPSS

CVE•added 2021/10/06 5:15 p.m.•35 views

CVE-2021-29837

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204913.

8.8CVSS8.4AI score0.00109EPSS

CVE•added 2021/10/06 5:15 p.m.•34 views

CVE-2021-29836

IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...

5.4CVSS5.2AI score0.00215EPSS

CVE•added 2021/10/06 5:15 p.m.•33 views

CVE-2021-29798

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734.

9.8CVSS9.2AI score0.00358EPSS

CVE•added 2021/10/06 5:15 p.m.•32 views

CVE-2021-29761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265.

4.3CVSS4.1AI score0.00119EPSS

CVE•added 2021/10/06 5:15 p.m.•32 views

CVE-2021-29855

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

5.4CVSS5.2AI score0.00215EPSS

CVE•added 2021/10/06 5:15 p.m.•29 views

CVE-2021-29758

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.

4.3CVSS4.3AI score0.00133EPSS

CVE•added 2021/10/06 5:15 p.m.•27 views

CVE-2021-29760

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213.

5.4CVSS4.3AI score0.00119EPSS