Lucene search

K
IbmSterling B2b Integrator5.2.0.1

10 matches found

CVE
CVE
added 2018/07/20 4:29 p.m.60 views

CVE-2018-1563

IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

5.4CVSS5.1AI score0.02112EPSS
CVE
CVE
added 2019/03/05 6:29 p.m.53 views

CVE-2019-4028

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.2AI score0.00229EPSS
CVE
CVE
added 2018/07/20 4:29 p.m.41 views

CVE-2018-1564

IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages. IBM X-Force ID: 142968.

6.7CVSS6.1AI score0.00046EPSS
CVE
CVE
added 2019/03/05 6:29 p.m.41 views

CVE-2019-4027

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID:...

5.4CVSS5.2AI score0.00229EPSS
CVE
CVE
added 2019/03/05 6:29 p.m.40 views

CVE-2019-4029

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID...

5.4CVSS5.2AI score0.00229EPSS
CVE
CVE
added 2019/03/05 6:29 p.m.40 views

CVE-2019-4063

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.

5.9CVSS5.4AI score0.00134EPSS
CVE
CVE
added 2018/07/31 1:29 p.m.37 views

CVE-2018-1718

IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.2AI score0.00214EPSS
CVE
CVE
added 2018/07/20 4:29 p.m.36 views

CVE-2017-1633

IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests. IBM X-Force ID: 133180.

4.3CVSS4.6AI score0.00264EPSS
CVE
CVE
added 2018/07/20 4:29 p.m.36 views

CVE-2018-1679

IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 145180.

5.3CVSS5.2AI score0.00191EPSS
CVE
CVE
added 2019/04/25 3:29 p.m.31 views

CVE-2018-1720

IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 147294.

7.5CVSS7.2AI score0.00096EPSS