Ibm Sterling B2B Integrator vulnerabilities
206 known vulnerabilities affecting ibm/sterling_b2b_integrator.
Total CVEs
206
CISA KEV
1
actively exploited
Public exploits
3
Exploited in wild
1
Severity breakdown
CRITICAL7HIGH30MEDIUM161LOW8
Vulnerabilities
Page 11 of 11
CVE-2013-5405P4LOWCVSS 3.5v5.22013-12-21
CVE-2013-5405 [LOW] CWE-79 CVE-2013-5405: Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling
Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.
nvd
CVE-2023-42010P4LOWCVSS 3.7≥ 6.0.0.0, ≤ 6.1.2.5≥ 6.2.0.0, ≤ 6.2.0.22024-07-17
CVE-2023-42010 [LOW] CWE-497 CVE-2023-42010: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 could disclose sensitive information in the HTTP response using man in the middle techniques. IBM X-Force ID: 265507.
nvd
CVE-2013-0468P4LOWCVSS 3.5v5.1v5.22013-07-03
CVE-2013-0468 [LOW] CWE-79 CVE-2013-0468: Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling Fil
Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-2983.
nvd
CVE-2019-4146P4LOWCVSS 3.1v6.0.0.0v6.0.0.12019-04-25
CVE-2019-4146 [LOW] CVE-2019-4146: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user t
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to obtain sensitive document information under unusual circumstances. IBM X-Force ID: 158401.
nvd
CVE-2024-52905P4LOWCVSS 2.7≥ 6.0.0.0, < 6.1.2.7≥ 6.2, < 6.2.0.42025-03-10
CVE-2024-52905 [LOW] CWE-497 CVE-2024-52905: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 could disclose sensitive database information to a privileged user.
nvd
CVE-2014-6146P4LOWCVSS 1.9v5.2.1v5.2.2+1 more2014-11-08
CVE-2014-6146 [LOW] CWE-200 CVE-2014-6146: IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configure
IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.
nvd
← Previous11 / 11