CVSS: 4.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4705
https://notcve.org/view.php?id=CVE-2020-4705
16 Nov 2020 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187190. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.2 y versiones 5.2.0.0 hasta 5.2.6.5, es vulnerable a un ataque de tipo cross-site s... • https://exchange.xforce.ibmcloud.com/vulnerabilities/187190 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4700
https://notcve.org/view.php?id=CVE-2020-4700
16 Nov 2020 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a user or group with administrative privileges. IBM X-Force ID: 187077. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.2 y versiones 5.2.0.0 hasta 5.2.6.5, podría permitir a un usuario autenticado que pertenezca a un grupo de usuarios específico crear un usuario o grupo con privilegios administrativos. IBM ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/187077 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4692
https://notcve.org/view.php?id=CVE-2020-4692
16 Nov 2020 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force ID: 186780. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.2 y versiones 5.2.0.0 hasta 5.2.6.5, podría permitir a un usuario autenticado obtener información confidencial de la interfaz de usuario del Panel. IBM X-Force ID: 186780 • https://exchange.xforce.ibmcloud.com/vulnerabilities/186780 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4671
https://notcve.org/view.php?id=CVE-2020-4671
16 Nov 2020 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.2 y versiones 5.2.0.0 hasta 5.2.6.5, almacena información potencialmente confidencial en archivos de registro que pueden ser leídos por un usuario autenticado. IBM X-Force ID: 186284 • https://exchange.xforce.ibmcloud.com/vulnerabilities/186284 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4655
https://notcve.org/view.php?id=CVE-2020-4655
16 Nov 2020 — IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 186091. IBM Sterling B2B Integrator Standard Edition versiones 6.0.0.0 hasta 6.0.3.2 y versiones 5.2.0.0 hasta 5.2.6.5, es vulnerable a una inyección SQL. Un atacante remoto podría enviar sentencias ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/186091 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4566
https://notcve.org/view.php?id=CVE-2020-4566
16 Nov 2020 — IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083. IBM Sterling B2B Integrator Standard Edition versiones 5.2.6.0 hasta 5.2.6.5 y 6.0.0.0 hasta 6.0.3.2, almacena información potencialmente muy confidencial en archivos de registro que pueden ser leídos por un usuario autenticado. IBM X-Force ID: 184083 • https://exchange.xforce.ibmcloud.com/vulnerabilities/184083 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4475
https://notcve.org/view.php?id=CVE-2020-4475
16 Nov 2020 — IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM Sterling B2B Integrator Standard Edition versiones 5.2.0.0 hasta 5.2.6.5 y versiones 6.0.0.0 hasta 6.0.3.2, podría permitir a un atacante remoto obtener información confidencial cuando se devuelve un mensaje de ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/181777 •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4564
https://notcve.org/view.php?id=CVE-2020-4564
20 Oct 2020 — IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183933. IBM Sterling B2B Integrator Standard Edition versiones 5.2.0.0 hasta 6.0.3.1 e IBM Sterling File Gateway versiones 2.2.0.0 hasta 6.... • https://exchange.xforce.ibmcloud.com/vulnerabilities/183933 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-4680
https://notcve.org/view.php?id=CVE-2019-4680
20 Oct 2020 — IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171733. IBM Sterling B2B Integrator Standard Edition versiones 5.2.0.0 hasta 6.0.2.2, es vulnerable a una inyección SQL. Un atacante remoto podría enviar sentencias SQL especialmente diseñadas, que podrían permitir al atacante ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/171733 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4312
https://notcve.org/view.php?id=CVE-2020-4312
13 May 2020 — IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page. IBM X-Force ID: 177089. IBM Sterling B2B Integrator Standard Edition versiones 5.2.0.0 hasta 6.0.3.1, podría permitir a un usuario autenticado obtener información confidencial de una página web en la memoria caché. ID de IBM X-Force: 177089. • https://exchange.xforce.ibmcloud.com/vulnerabilities/177089 •