cbcvebase.
CVE-2016-6020
published 2017-02-01

CVE-2016-6020: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim…

PriorityP423medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EPSS
0.80%
52.7th percentile
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Affected

21 ranges
VendorProductVersion rangeFixed in
ibmsterling_b2b_integrator——
ibmsterling_b2b_integrator——
ibmsterling_b2b_integrator——
ibmsterling_b2b_integrator——
ibmsterling_b2b_integrator——
ibmsterling_b2b_integrator——
ibmsterling_b2b_integrator——
ibmsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——
ibm_corporationsterling_b2b_integrator——

CVSS provenance

nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.