Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm sterling b2b integrator vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv3
CVE-2017-1544
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 up to and including 2.2.6) caches usernames and passwords in browsers that could be used by a local malicious user to obtain sensitive information. IBM X-Force ID: 130812.
Ibm Sterling File Gateway
7.5
CVSSv3
CVE-2021-20584
IBM Sterling File Gateway 2.2.0.0 up to and including 6.1.1.0 could allow a remote malicious user to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397.
Ibm Sterling B2b Integrator
7.5
CVSSv3
CVE-2021-38925
IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 up to and including 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 210171.
Ibm Sterling B2b Integrator
7.5
CVSSv3
CVE-2020-4937
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 up to and including 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 191814.
Ibm Sterling B2b Integrator
7.5
CVSSv3
CVE-2018-1720
IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 147294.
Ibm Sterling B2b Integrator 6.0.0.0
Ibm Sterling B2b Integrator 6.0.0.1
Ibm Sterling B2b Integrator 5.2.0.1
Ibm Sterling B2b Integrator 5.2.6.3 6
7.4
CVSSv3
CVE-2015-7410
The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle malicious users to obtain sensitive information or modify data via unspecified vectors.
Ibm Sterling B2b Integrator 5.2
7.1
CVSSv3
CVE-2019-4043
IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: ...
Ibm Sterling B2b Integrator 6.0.0.0
Ibm Sterling B2b Integrator
6.7
CVSSv3
CVE-2018-1564
IBM Sterling B2B Integrator Standard Edition 5.2 up to and including 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages. IBM X-Force ID: 142968.
Ibm Sterling B2b Integrator
6.5
CVSSv3
CVE-2023-32341
IBM Sterling B2B Integrator 6.0.0.0 up to and including 6.0.3.8 and 6.1.0.0 up to and including 6.1.2.3 could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 255827.
Ibm Sterling B2b Integrator
6.5
CVSSv3
CVE-2023-22876
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 up to and including 6.0.3.7 and 6.1.0.0 up to and including 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 244364.
Ibm Sterling B2b Integrator
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »