5.4
CVSSv3

CVE-2021-29855

Published: 06/10/2021 Updated: 14/10/2021
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 up to and including 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205684.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm sterling b2b integrator

Recent Articles

How Symantec Stops Microsoft Exchange Server Attacks
Symantec Threat Intelligence Blog • Threat Hunter Team • 08 Mar 2024

Symantec's Intrusion Protection technology will block all attempted exploits of critical vulnerabilities.

Posted: 8 Mar, 20214 Min ReadThreat Intelligence SubscribeHow Symantec Stops Microsoft Exchange Server AttacksSymantec's Intrusion Protection technology will block all attempted exploits of critical vulnerabilities. Users of Microsoft Exchange Server are advised to update to the latest version immediately, as a growing number of attackers are attempting to exploit four recently patched zero-day vulnerabilities in the software. Microsoft released emergenc...