Page 4 of 62 results (0.010 seconds)

CVSS: 6.4EPSS: 0%CPEs: 7EXPL: 0

CVE-2022-34330 – IBM Sterling B2B Integrator cross-site scripting

https://notcve.org/view.php?id=CVE-2022-34330

04 Jan 2023 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229469. IBM Sterling B2B Integrator Standard Edition 6.0.0.0 a 6.1.2.1 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a los usuarios incrustar código JavaScript arbitrario en ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/229469 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-22352 – IBM Sterling B2B Integrator Standard Edition cross-site scripting

https://notcve.org/view.php?id=CVE-2022-22352

04 Jan 2023 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220398. IBM Sterling B2B Integrator Standard Edition 6.0.0.0 a 6.1.2.1 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a los usuarios incrustar código JavaScript arbitrario en ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/220398 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.8EPSS: 0%CPEs: 8EXPL: 0

CVE-2021-39087

https://notcve.org/view.php?id=CVE-2021-39087

16 Aug 2022 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.5, 6.1.0.0 hasta 6.1.0.4, y 6.1.1.0 hasta 6.1.1.1, podría permitir a un usuario autenticado obtener información confidencial debido a controles de permisos inapropiados. IBM X-Force ID: 2... • https://exchange.xforce.ibmcloud.com/vulnerabilities/216109 • CWE-276: Incorrect Default Permissions •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2021-39085

https://notcve.org/view.php?id=CVE-2021-39085

16 Aug 2022 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 215888. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.5, 6.1.0.0 hasta 6.1.0.4 y 6.1.1.0 hasta 6.1.1.1, es vulnerable a una inyección SQL. Un atacant... • https://exchange.xforce.ibmcloud.com/vulnerabilities/215888 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0

CVE-2021-39035

https://notcve.org/view.php?id=CVE-2021-39035

16 Aug 2022 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213965. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.5, 6.1.0.0 hasta 6.1.0.4, y 6.1.1.0 hasta 6.1.1.1, es vul... • https://exchange.xforce.ibmcloud.com/vulnerabilities/213965 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0

CVE-2021-38954

https://notcve.org/view.php?id=CVE-2021-38954

30 Jun 2022 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.5 y 6.1.0.0 hasta 6.1.1.0, podría divulgar información confidencial de la versión que podría ayudar en futuros ataques contra el sistema. IBM X-Force ID: 211414 • https://exchange.xforce.ibmcloud.com/vulnerabilities/211414 •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2022-22482

https://notcve.org/view.php?id=CVE-2022-22482

17 May 2022 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.5 y 6.1.0.0 hasta 6.1.1.0 podría permitir a un usuario autenticado cargar archivos que podrían llenar el sistema de archivos y causar una denegación de servicio. IBM X-Force ID: 225977 • https://exchange.xforce.ibmcloud.com/vulnerabilities/225977 • CWE-434: Unrestricted Upload of File with Dangerous Type •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2021-39033

https://notcve.org/view.php?id=CVE-2021-39033

19 Apr 2022 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213963. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.5 y versiones 6.1.0.0 hasta 6.1.1.0. podría permitir a un atacante remoto obtener información confidencial cuando es... • https://exchange.xforce.ibmcloud.com/vulnerabilities/213963 • CWE-209: Generation of Error Message Containing Sensitive Information •

CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2020-4668

https://notcve.org/view.php?id=CVE-2020-4668

08 Apr 2022 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186283. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.5, 6.1.0.0 hasta 6.1.0.3 y 6.1.1.0 es vulnerable a un ataque de tipo cross-site request forgery, lo que podría permitir a un atacante eje... • https://exchange.xforce.ibmcloud.com/vulnerabilities/186283 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 4.3EPSS: 0%CPEs: 4EXPL: 0

CVE-2021-29700

https://notcve.org/view.php?id=CVE-2021-29700

07 Oct 2021 — IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656. IBM Sterling B2B Integrator Standard Edition versiones 5.2.0.0 hasta 6.1.1.0, podría permitir a un atacante autenticado obtener información confidencial de los archivos de configuración que podría ayudar a otros ataques contra el sistema. IBM X-Force ID: 200656 • https://exchange.xforce.ibmcloud.com/vulnerabilities/200656 •