Ibm Sterling B2B Integrator vulnerabilities
195 known vulnerabilities affecting ibm/sterling_b2b_integrator.
Total CVEs
195
CISA KEV
1
actively exploited
Public exploits
3
Exploited in wild
1
Severity breakdown
CRITICAL7HIGH28MEDIUM152LOW8
Vulnerabilities
Page 3 of 10
CVE-2023-42014MEDIUMCVSS 5.4≥ 6.0.0.0, ≤ 6.2.0.22024-06-27
CVE-2023-42014 [MEDIUM] CWE-79 CVE-2023-42014: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scr
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265511.
nvd
CVE-2023-42011MEDIUMCVSS 5.4v6.1v6.22024-06-27
CVE-2023-42011 [MEDIUM] CWE-1021 CVE-2023-42011: IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts
IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. IBM X-Force ID: 265508.
nvd
CVE-2024-22357MEDIUMCVSS 5.4≥ 6.0.0.0, ≤ 6.0.3.9≥ 6.1.0.0, ≤ 6.1.2.3+1 more2024-04-12
CVE-2024-22357 [MEDIUM] CWE-79 CVE-2024-22357: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnera
IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 280894.
cvelistv5nvd
CVE-2023-45186MEDIUMCVSS 5.4≥ 6.0.0.0, ≤ 6.0.3.9≥ 6.1.0.0, ≤ 6.1.2.3+1 more2024-04-12
CVE-2023-45186 [MEDIUM] CWE-79 CVE-2023-45186: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnera
IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 2
cvelistv5nvd
CVE-2023-50307MEDIUMCVSS 5.4≥ 6.0.0.0, ≤ 6.0.3.9≥ 6.1.0.0, ≤ 6.1.2.3+1 more2024-04-12
CVE-2023-50307 [MEDIUM] CWE-79 CVE-2023-50307: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnera
IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 273338.
cvelistv5nvd
CVE-2023-42016MEDIUMCVSS 4.3≥ 6.0.0.0, ≤ 6.0.3.8≥ 6.1.0.0, ≤ 6.1.2.32024-02-09
CVE-2023-42016 [MEDIUM] CWE-614 CVE-2023-42016: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 doe
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure
cvelistv5nvd
CVE-2023-32341MEDIUMCVSS 6.5≥ 6.0.0.0, ≤ 6.0.3.8≥ 6.1.0.0, ≤ 6.1.2.32024-02-09
CVE-2023-32341 [MEDIUM] CWE-400 CVE-2023-32341: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 could allow an authe
IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 255827.
cvelistv5nvd
CVE-2022-35638HIGHCVSS 8.8≥ 6.0.0.0, < 6.0.3.9≥ 6.1.0.0, < 6.1.2.3+2 more2023-11-22
CVE-2022-35638 [HIGH] CWE-352 CVE-2022-35638: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230824.
cvelistv5nvd
CVE-2023-25682MEDIUMCVSS 5.5≥ 6.0.0.0, < 6.0.3.9≥ 6.1.0.0, < 6.1.2.32023-11-22
CVE-2023-25682 [MEDIUM] CWE-532 CVE-2023-25682: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 sto
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 247034.
nvd
CVE-2023-22876MEDIUMCVSS 6.5≥ 6.0.0.0, < 6.0.3.8≥ 6.1.0.0, < 6.1.2.2+2 more2023-03-15
CVE-2023-22876 [MEDIUM] CWE-200 CVE-2023-22876: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 244364.
cvelistv5nvd
CVE-2022-43578MEDIUMCVSS 5.4≥ 6.0.0.0, ≤ 6.0.3.7≥ 6.1.0.0, ≤ 6.1.2.02023-02-22
CVE-2022-43578 [MEDIUM] CWE-79 CVE-2022-43578: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 238683.
nvd
CVE-2022-40232HIGHCVSS 8.8≥ 6.1.0.0, ≤ 6.1.1.1v6.1.2.02023-02-17
CVE-2022-40232 [HIGH] CWE-276 CVE-2022-40232:
IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an au
IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.
nvd
CVE-2022-40231HIGHCVSS 8.8≥ 6.0.0.0, ≤ 6.0.3.7≥ 6.1.0.0, ≤ 6.1.2.02023-02-17
CVE-2022-40231 [HIGH] CVE-2022-40231: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 235533.
nvd
CVE-2022-43579MEDIUMCVSS 5.4≥ 6.0.0.0, ≤ 6.0.3.7≥ 6.1.0.0, ≤ 6.1.2.02023-02-17
CVE-2022-43579 [MEDIUM] CWE-79 CVE-2022-43579: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 238684.
nvd
CVE-2022-34330MEDIUMCVSS 6.1≥ 6.0.0.0, ≤ 6.0.3.6≥ 6.1.0.0, ≤ 6.1.0.5+3 more2023-01-05
CVE-2022-34330 [MEDIUM] CWE-79 CVE-2022-34330: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scr
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229469.
cvelistv5nvd
CVE-2022-22371MEDIUMCVSS 6.5≥ 6.0.0.0, ≤ 6.0.3.6≥ 6.1.0.0, ≤ 6.1.0.5+2 more2023-01-05
CVE-2022-22371 [MEDIUM] CWE-613 CVE-2022-22371: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session aft
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195.
nvd
CVE-2022-22338CRITICALCVSS 9.8≥ 6.0.0.0, < 6.0.3.7≥ 6.1.0.0, < 6.1.0.6+2 more2023-01-04
CVE-2022-22338 [CRITICAL] CWE-89 CVE-2022-22338: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection.
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 219510.
nvd
CVE-2022-43920HIGHCVSS 8.8≥ 6.0.0.0, < 6.0.3.7≥ 6.1.0.0, < 6.1.0.6+2 more2023-01-04
CVE-2022-43920 [HIGH] CVE-2022-43920: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated us
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control vulnerability in the Sftp server adapter. IBM X-Force ID: 241362.
nvd
CVE-2021-38928MEDIUMCVSS 5.4≥ 6.0.0.0, < 6.0.3.7≥ 6.1.0.0, < 6.1.0.6+2 more2023-01-04
CVE-2021-38928 [MEDIUM] CVE-2021-38928: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Shar
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323.
nvd
CVE-2022-22352MEDIUMCVSS 5.4≥ 6.0.0.0, < 6.0.3.7≥ 6.1.0.0, < 6.1.0.6+2 more2023-01-04
CVE-2022-22352 [MEDIUM] CWE-79 CVE-2022-22352: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scr
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220398.
nvd