CVE-2024-31903

CWE-502 — Deserialization of Untrusted Data3 documents3 sources
Severity
8.8HIGH
EPSS
18.2%
top 4.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Sterling B2B Integrator Standard EditionIBM Sterling B2B Integrator
Timeline
PublishedJan 22

Description

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/sterling_b2b_integrator_standard_edition6.0.0.0 — 6.1.2.5+1
▶NVDibm/sterling_b2b_integrator6.0.0.0 — 6.1.2.5+1

🔴Vulnerability Details

2
GHSA
GHSA-96xr-637g-3x8c: IBM Sterling B2B Integrator Standard Edition 6↗2025-01-22
▶
CVEList
IBM Sterling B2B Integrator Standard Edition code execution↗2025-01-22
▶