Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm sterling b2b integrator 6.1.1.0 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2021-20584
IBM Sterling File Gateway 2.2.0.0 up to and including 6.1.1.0 could allow a remote malicious user to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397.
Ibm Sterling B2b Integrator
356
VMScore
CVE-2021-29760
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 up to and including 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213.
Ibm Sterling B2b Integrator
356
VMScore
CVE-2021-20376
IBM Sterling File Gateway 2.2.0.0 up to and including 6.1.1.0 could allow an authenticated malicious user to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.
Ibm Sterling B2b Integrator
356
VMScore
CVE-2021-20372
IBM Sterling File Gateway 2.2.0.0 up to and including 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518.
Ibm Sterling B2b Integrator
445
VMScore
CVE-2021-38925
IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 up to and including 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 210171.
Ibm Sterling B2b Integrator
356
VMScore
CVE-2021-20375
IBM Sterling File Gateway 2.2.0.0 up to and including 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567.
Ibm Sterling B2b Integrator
356
VMScore
CVE-2021-29761
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 up to and including 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265.
Ibm Sterling B2b Integrator
356
VMScore
CVE-2021-29700
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 up to and including 6.1.1.0 could allow an authneticated malicious user to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.
Ibm Sterling B2b Integrator
356
VMScore
CVE-2021-29758
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 up to and including 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.
Ibm Sterling B2b Integrator
357
VMScore
CVE-2022-22482
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 up to and including 6.0.3.5 and 6.1.0.0 up to and including 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977.
Ibm Sterling B2b Integrator
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook