Sterling B2b Integrator Standard Edition (Ibm) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-07-17. Vendor: Ibm.
CVEs of Sterling B2b Integrator Standard Edition
- CVE-2023-42010 - CVSS 3.7 (low), 2024-07-17: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 could disclose sensitive information in the HTTP response…
- CVE-2023-25682 - CVSS 6.2 (medium), 2023-11-22: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that…
- CVE-2022-43578 - CVSS 5.4 (medium), 2023-02-22: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability…
- CVE-2022-43579 - CVSS 5.4 (medium), 2023-02-17: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability…
- CVE-2022-40231 - CVSS 8.8 (high), 2023-02-17: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized…
- CVE-2022-40232 - CVSS 8.8 (high), 2023-02-17: IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have…
- CVE-2022-22371 - CVSS 6.5 (medium), 2023-01-05: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated…
- CVE-2022-43920 - CVSS 8.8 (high), 2023-01-04: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an…
- CVE-2022-22338 - CVSS 9.8 (critical), 2023-01-04: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL…
- CVE-2022-22337 - CVSS 6.5 (medium), 2023-01-04: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user. IBM X-Force ID: 219507.
- CVE-2021-38928 - CVSS 5.4 (medium), 2023-01-04: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out…
- CVE-2022-22352 - CVSS 5.4 (medium), 2023-01-04: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…