Ibm Sterling B2B Integrator vulnerabilities
195 known vulnerabilities affecting ibm/sterling_b2b_integrator.
Total CVEs
195
CISA KEV
1
actively exploited
Public exploits
3
Exploited in wild
1
Severity breakdown
CRITICAL7HIGH28MEDIUM152LOW8
Vulnerabilities
Page 4 of 10
CVE-2022-22337MEDIUMCVSS 6.5≥ 6.0.0.0, < 6.0.3.7≥ 6.1.0.0, < 6.1.0.6+2 more2023-01-04
CVE-2022-22337 [MEDIUM] CWE-200 CVE-2022-22337: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive inform
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user. IBM X-Force ID: 219507.
nvd
CVE-2021-39085CRITICALCVSS 9.8≥ 6.0.0.0, < 6.0.3.6≥ 6.1.0.0, < 6.1.0.5+7 more2022-08-16
CVE-2021-39085 [CRITICAL] CWE-89 CVE-2021-39085: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 215888.
cvelistv5nvd
CVE-2021-39035MEDIUMCVSS 5.4≥ 6.0.0.0, < 6.0.3.6≥ 6.1.0.0, < 6.1.0.5+7 more2022-08-16
CVE-2021-39035 [MEDIUM] CWE-79 CVE-2021-39035: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi
cvelistv5nvd
CVE-2021-39087MEDIUMCVSS 6.5≥ 6.0.0.0, < 6.0.3.6≥ 6.1.0.0, < 6.1.0.5+7 more2022-08-16
CVE-2021-39087 [MEDIUM] CWE-276 CVE-2021-39087: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.
cvelistv5nvd
CVE-2021-38954MEDIUMCVSS 4.3≥ 6.0.0.0, ≤ 6.0.3.5≥ 6.1.0.0, ≤ 6.1.1.0+4 more2022-06-30
CVE-2021-38954 [MEDIUM] CVE-2021-38954: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414.
cvelistv5nvd
CVE-2022-22482MEDIUMCVSS 6.5≥ 6.0.0.0, ≤ 6.0.3.5≥ 6.1.0.0, ≤ 6.1.1.0+4 more2022-05-17
CVE-2022-22482 [MEDIUM] CWE-434 CVE-2022-22482: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977.
cvelistv5nvd
CVE-2021-39033MEDIUMCVSS 6.5≥ 6.0.0.0, < 6.0.3.6≥ 6.1.0.0, < 6.1.1.1+4 more2022-04-19
CVE-2021-39033 [MEDIUM] CWE-209 CVE-2021-39033: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213963.
cvelistv5nvd
CVE-2020-4668HIGHCVSS 8.8≥ 6.0.0.0, ≤ 6.0.3.5≥ 6.1.0.0, ≤ 6.1.0.3+5 more2022-04-08
CVE-2020-4668 [HIGH] CWE-352 CVE-2020-4668: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186283.
cvelistv5nvd
CVE-2021-20584HIGHCVSS 7.5≥ 2.2.0.0, ≤ 5.2.6.5_4≥ 6.0.0.0, ≤ 6.0.0.6+2 more2021-10-07
CVE-2021-20584 [HIGH] CVE-2021-20584: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397.
nvd
CVE-2021-29700MEDIUMCVSS 4.3≥ 5.2.0.0, ≤ 5.2.6.5_4≥ 6.0.0.0, ≤ 6.0.0.6+10 more2021-10-07
CVE-2021-29700 [MEDIUM] CVE-2021-29700: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated at
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.
cvelistv5nvd
CVE-2021-20372MEDIUMCVSS 4.3≥ 2.2.0.0, ≤ 5.2.6.5_3≥ 6.0.0.0, ≤ 6.0.0.6+2 more2021-10-07
CVE-2021-20372 [MEDIUM] CVE-2021-20372: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518.
nvd
CVE-2021-20561MEDIUMCVSS 6.1≥ 2.2.0.0, ≤ 5.2.6.5_4≥ 6.0.0.0, ≤ 6.0.0.6+2 more2021-10-07
CVE-2021-20561 [MEDIUM] CWE-79 CVE-2021-20561: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulner
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199230.
nvd
CVE-2021-20571MEDIUMCVSS 5.4≥ 5.2.0.0, ≤ 5.2.6.5_4≥ 6.0.0.0, ≤ 6.0.0.6+10 more2021-10-07
CVE-2021-20571 [MEDIUM] CWE-79 CVE-2021-20571: IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. Th
IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199246.
cvelistv5nvd
CVE-2021-20376MEDIUMCVSS 4.3≥ 2.2.0.0, ≤ 5.2.6.5_3≥ 6.0.0.0, ≤ 6.0.3.4+1 more2021-10-07
CVE-2021-20376 [MEDIUM] CWE-203 CVE-2021-20376: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.
nvd
CVE-2021-20375MEDIUMCVSS 6.5≥ 2.2.0.0, ≤ 5.2.6.5_3≥ 6.0.0.0, ≤ 6.0.3.4+1 more2021-10-07
CVE-2021-20375 [MEDIUM] CVE-2021-20375: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567.
nvd
CVE-2021-29798CRITICALCVSS 9.8≥ 6.0.0.0, ≤ 6.0.3.4≥ 6.1.0.0, ≤ 6.1.0.3+4 more2021-10-06
CVE-2021-29798 [CRITICAL] CWE-89 CVE-2021-29798: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection.
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734.
cvelistv5nvd
CVE-2021-29903CRITICALCVSS 9.8≥ 5.2.6.0, ≤ 6.0.3.4≥ 6.1.0.0, ≤ 6.1.0.3+4 more2021-10-06
CVE-2021-29903 [CRITICAL] CWE-89 CVE-2021-29903: IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection.
IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 207506.
cvelistv5nvd
CVE-2021-38925HIGHCVSS 7.5≥ 5.2.0.0, ≤ 6.0.3.4≥ 6.1.0.0, ≤ 6.1.0.3+4 more2021-10-06
CVE-2021-38925 [HIGH] CWE-326 CVE-2021-38925: IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryp
IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171.
cvelistv5nvd
CVE-2021-29837HIGHCVSS 8.8≥ 5.2.0.0, ≤ 6.0.3.4≥ 6.1.0.0, ≤ 6.1.0.3+4 more2021-10-06
CVE-2021-29837 [HIGH] CWE-352 CVE-2021-29837: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site req
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204913.
cvelistv5nvd
CVE-2021-29760MEDIUMCVSS 4.3≥ 5.2.0.0, ≤ 6.1.0.3v6.0.0.0+7 more2021-10-06
CVE-2021-29760 [MEDIUM] CVE-2021-29760: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated us
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213.
cvelistv5nvd