Ibm

Sterling B2b Integrator

190 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2024-45089

  • EPSS 0.07%
  • Veröffentlicht 31.01.2025 16:15:34
  • Zuletzt bearbeitet 05.03.2025 18:17:37

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an observable discrepancy.

5.4

CVE-2024-47103

  • EPSS 0.05%
  • Veröffentlicht 31.01.2025 16:15:34
  • Zuletzt bearbeitet 05.03.2025 18:17:37

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the int...

5.4

CVE-2024-47116

  • EPSS 0.04%
  • Veröffentlicht 31.01.2025 16:15:34
  • Zuletzt bearbeitet 05.03.2025 18:17:37

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the...

5.4

CVE-2024-49807

  • EPSS 0.05%
  • Veröffentlicht 31.01.2025 16:15:34
  • Zuletzt bearbeitet 06.03.2025 13:30:34

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus alterin...

5.4

CVE-2024-40696

  • EPSS 0.05%
  • Veröffentlicht 31.01.2025 16:15:33
  • Zuletzt bearbeitet 05.03.2025 18:17:37

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the int...

8.8

CVE-2023-38739

  • EPSS 0.03%
  • Veröffentlicht 31.01.2025 16:15:30
  • Zuletzt bearbeitet 05.03.2025 18:17:37

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

9.8

CVE-2023-50316

  • EPSS 0.06%
  • Veröffentlicht 28.01.2025 01:15:08
  • Zuletzt bearbeitet 05.03.2025 14:08:19

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information i...

5.3

CVE-2024-27263

  • EPSS 0.04%
  • Veröffentlicht 28.01.2025 01:15:08
  • Zuletzt bearbeitet 04.03.2025 21:58:37

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man in the middle techniques.

5.4

CVE-2023-32340

  • EPSS 0.1%
  • Veröffentlicht 23.01.2025 03:15:08
  • Zuletzt bearbeitet 04.03.2025 21:36:47

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cr...

5.4

CVE-2023-50309

  • EPSS 0.1%
  • Veröffentlicht 23.01.2025 03:15:08
  • Zuletzt bearbeitet 04.03.2025 21:36:47

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...