CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-4726
https://notcve.org/view.php?id=CVE-2019-4726
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172363. IBM Sterling B2B Integrator Standard Edition versiones 5.2.0.0 hasta 5.2.6.5, es vulnerable a un ataque de tipo cross-site request forgery, que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas desde un usuario que el sitio web confía. IBM X-Force ID: 172363. • https://exchange.xforce.ibmcloud.com/vulnerabilities/172363 https://www.ibm.com/support/pages/node/3145833 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-4387
https://notcve.org/view.php?id=CVE-2019-4387
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 162715. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.2.0, es vulnerable a una inyección SQL. Un atacante remoto podría enviar sentencias SQL especialmente diseñadas, lo que podría permitir al atacante visualizar, agregar, modificar o eliminar información en la base de datos de back-end. • https://exchange.xforce.ibmcloud.com/vulnerabilities/162175 https://www.ibm.com/support/pages/node/1115109 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.1EPSS: 0%CPEs: 2EXPL: 0CVE-2018-1800
https://notcve.org/view.php?id=CVE-2018-1800
IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is occurring. IBM X-Force ID: 149607. IBM Sterling B2B Integrator Standard Edition 5.2.6.0 y 6.2.6.1 podría permitir que un usuario local obtenga información altamente sensible durante un corto periodo de tiempo mientras se está instalando. IBM X-Force ID: 149607. • https://exchange.xforce.ibmcloud.com/vulnerabilities/149607 https://www.ibm.com/support/docview.wss?uid=ibm10731379 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •