Ibm Sterling B2B Integrator vulnerabilities
195 known vulnerabilities affecting ibm/sterling_b2b_integrator.
Total CVEs
195
CISA KEV
1
actively exploited
Public exploits
3
Exploited in wild
1
Severity breakdown
CRITICAL7HIGH28MEDIUM152LOW8
Vulnerabilities
Page 5 of 10
CVE-2021-29855MEDIUMCVSS 5.4≥ 5.2.0.0, ≤ 6.0.3.4≥ 6.1.0.0, ≤ 6.1.0.3+4 more2021-10-06
CVE-2021-29855 [MEDIUM] CWE-79 CVE-2021-29855: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scr
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205684.
cvelistv5nvd
CVE-2021-29761MEDIUMCVSS 4.3≥ 5.2.0.0, ≤ 6.1.0.3v6.0.0.0+7 more2021-10-06
CVE-2021-29761 [MEDIUM] CVE-2021-29761: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated us
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265.
cvelistv5nvd
CVE-2021-29758MEDIUMCVSS 4.3≥ 5.2.0.0, ≤ 6.1.0.3v6.0.0.0+7 more2021-10-06
CVE-2021-29758 [MEDIUM] CVE-2021-29758: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated us
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.
cvelistv5nvd
CVE-2021-29836MEDIUMCVSS 5.4≥ 5.2.0.0, ≤ 6.0.3.4≥ 6.1.0.0, ≤ 6.1.0.3+8 more2021-10-06
CVE-2021-29836 [MEDIUM] CWE-79 CVE-2021-29836: IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site sc
IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204912.
cvelistv5nvd
CVE-2021-29764MEDIUMCVSS 5.4≥ 5.2.0.0, ≤ 6.1.0.3v5.2.0.0+3 more2021-10-06
CVE-2021-29764 [MEDIUM] CWE-79 CVE-2021-29764: IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. Th
IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 202268.
cvelistv5nvd
CVE-2021-20562MEDIUMCVSS 5.4≥ 5.2.0.0, ≤ 5.2.6.5_3≥ 6.1.0.0, ≤ 6.1.0.2+4 more2021-07-27
CVE-2021-20562 [MEDIUM] CWE-79 CVE-2021-20562: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 v
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199232.
cvelistv5nvd
CVE-2020-4646MEDIUMCVSS 4.3≥ 5.2.0.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.3+7 more2021-05-19
CVE-2020-4646 [MEDIUM] CVE-2020-4646: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control.
cvelistv5nvd
CVE-2019-4728HIGHCVSS 8.8≥ 5.2.0.0, ≤ 5.2.6.5_2≥ 6.0.0.0, ≤ 6.0.3.2+5 more2021-01-05
CVE-2019-4728 [HIGH] CWE-502 CVE-2019-4728: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privi
cvelistv5nvd
CVE-2020-4762HIGHCVSS 8.8≥ 5.2.0.0, ≤ 5.2.6.5_2≥ 6.0.0.0, ≤ 6.0.3.2+5 more2021-01-05
CVE-2020-4762 [HIGH] CVE-2020-4762: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896.
cvelistv5nvd
CVE-2020-4761MEDIUMCVSS 5.3≥ 5.2.0.0, ≤ 5.2.6.5_2≥ 6.0.0.0, ≤ 6.0.3.2+5 more2021-01-05
CVE-2020-4761 [MEDIUM] CWE-209 CVE-2020-4761: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 188895.
cvelistv5nvd
CVE-2020-4657MEDIUMCVSS 6.1≥ 5.2.0.0, ≤ 6.0.3.2v5.2.0.0+1 more2020-12-16
CVE-2020-4657 [MEDIUM] CWE-79 CVE-2020-4657: IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scr
IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186094.
cvelistv5nvd
CVE-2019-4738MEDIUMCVSS 6.5≥ 5.2.0.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.1+4 more2020-12-10
CVE-2019-4738 [MEDIUM] CWE-312 CVE-2019-4738: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 dis
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.
cvelistv5nvd
CVE-2020-4937HIGHCVSS 7.5≥ 5.2.0.0, ≤ 6.0.3.2v5.2.0.0+1 more2020-11-20
CVE-2020-4937 [HIGH] CWE-327 CVE-2020-4937: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected crypt
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 191814.
cvelistv5nvd
CVE-2020-4700HIGHCVSS 8.8≥ 5.2.0.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.2+4 more2020-11-16
CVE-2020-4700 [HIGH] CVE-2020-4700: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a user or group with administrative privileges. IBM X-Force ID: 187077.
cvelistv5nvd
CVE-2020-4655HIGHCVSS 8.8≥ 5.2.0.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.2+4 more2020-11-16
CVE-2020-4655 [HIGH] CWE-89 CVE-2020-4655: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 186091.
cvelistv5nvd
CVE-2020-4671MEDIUMCVSS 6.5≥ 5.2.0.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.2+4 more2020-11-16
CVE-2020-4671 [MEDIUM] CWE-532 CVE-2020-4671: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 sto
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284.
cvelistv5nvd
CVE-2020-4566MEDIUMCVSS 6.5≥ 5.2.6.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.2+4 more2020-11-16
CVE-2020-4566 [MEDIUM] CVE-2020-4566: IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 sto
IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083.
cvelistv5nvd
CVE-2020-4475MEDIUMCVSS 6.5≥ 5.2.0.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.2+4 more2020-11-16
CVE-2020-4475 [MEDIUM] CVE-2020-4475: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 cou
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
cvelistv5nvd
CVE-2020-4705MEDIUMCVSS 4.8≥ 5.2.0.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.2+2 more2020-11-16
CVE-2020-4705 [MEDIUM] CWE-79 CVE-2020-4705: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187190.
cvelistv5nvd
CVE-2020-4692MEDIUMCVSS 6.5≥ 5.2.0.0, ≤ 5.2.6.5≥ 6.0.0.0, ≤ 6.0.3.2+4 more2020-11-16
CVE-2020-4692 [MEDIUM] CVE-2020-4692: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 cou
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force ID: 186780.
cvelistv5nvd