ibm sterling b2b integrator 5.2.4 vulnerabilities and exploits

(subscribe to this query)

1.9

CVSSv2

IBM Sterling B2B Integrator 5.2.x up to and including 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.

Ibm Sterling B2b Integrator 5.2.1 Ibm Sterling B2b Integrator 5.2.4 Ibm Sterling B2b Integrator 5.2.2

3.5

CVSSv2

IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...

Ibm Sterling B2b Integrator 5.2.2 Ibm Sterling B2b Integrator 5.2.5 Ibm Sterling B2b Integrator 5.2 Ibm Sterling B2b Integrator 5.2.4 Ibm Sterling B2b Integrator 5.2.1 Ibm Sterling B2b Integrator 5.2.3 Ibm Sterling B2b Integrator 5.2.6

5.8

CVSSv2

IBM Sterling B2B Integrator Standard Edition could allow a remote malicious user to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed...

Ibm Sterling B2b Integrator 5.2.6 Ibm Sterling B2b Integrator 5.2.4.2 Ibm Sterling B2b Integrator 5.2.4.1 Ibm Sterling B2b Integrator 5.2 Ibm Sterling B2b Integrator 5.2.1 Ibm Sterling B2b Integrator 5.2.2 Ibm Sterling B2b Integrator 5.2.4 Ibm Sterling B2b Integrator 5.2.5

5

CVSSv2

The Change Password feature in IBM Sterling B2B Integrator 5.2.x up to and including 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote malicious users to obtain admin access via a brute-force approach.

Ibm Sterling B2b Integrator 5.2.4 Ibm Sterling B2b Integrator 5.2

5

CVSSv2

The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote malicious users to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request.

Ibm Sterling B2b Integrator 5.2.4 Ibm Sterling B2b Integrator 5.2.4.1 Ibm Sterling B2b Integrator 5.2.4.2 Ibm Sterling B2b Integrator 5.2.5.0 Ibm Sterling B2b Integrator 5.1 Ibm Sterling B2b Integrator 5.2 Ibm Sterling B2b Integrator 5.2.1 Ibm Sterling B2b Integrator 5.2.2 Ibm Sterling File Gateway 2.1 Ibm Sterling File Gateway 2.2

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Ibm Sterling B2b Integrator 5.2.4 Ibm Sterling File Gateway -

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook