Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: IBM Sterling B2B Integrator Standard Edition 6.1.2.1 Clear all filters
TI-2022-06692 CVE-2022-22371 · GHSA-g785-r4r2-28qv

IBM Sterling B2B Integrator Standard Edition session fixation

Priority LOW 29

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0035 Published 2023-01-04 Fixed in 6.1.2.1 CWE-613
TI-2021-16371 CVE-2021-38928 · GHSA-2gmf-964r-8w6g

IBM Sterling B2B Integrator Standard Edition cross-origin resource sharing

Priority LOW 25

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domai…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00407 Published 2023-01-04 Fixed in 6.1.2.1
TI-2022-21571 CVE-2022-43920 · GHSA-x3vc-j59q-g8m4

IBM Sterling B2B Integrator Standard Edition privilege escalation

Priority LOW 39

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control vulnerability in the Sftp server adapter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00586 Published 2023-01-04 Fixed in 6.1.2.1