CVE-2017-1347 — SQL Injection in IBM Sterling B2B Integrator

CWE-89 — SQL Injection4 documents4 sources
Severity
8.8HIGHNVD
EPSS
0.6%
top 30.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sterling B2B Integrator
Timeline
PublishedJun 23
Latest updateMay 17

Description

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126462.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/sterling_b2b_integrator7 versions+6

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j9p8-gfg4-6vqp: IBM Sterling B2B Integrator Standard Edition 5↗2022-05-17
▶
CVEList
CVE-2017-1347: IBM Sterling B2B Integrator Standard Edition 5↗2017-06-23
▶

💥Exploits & PoCs

1
Exploit-DB
WebKit - 'WebCore::AXObjectCache::performDeferredCacheUpdate' Use-After-Free↗2017-11-22
▶
CVE-2017-1347 — SQL Injection in IBM | cvebase