IBM Sterling B2B Integrator 6.1.2.0 Standard Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_b2b_integrator:6.1.2.0:*:*:*:standard:*:*:*
part: a version: 6.1.2.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc) |
| Edition | * |
| Language | * |
| Software edition | standard |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-43920 |
vulnerable | 2026-06-08 05:49:35.015094 |
IBM Sterling B2B Integrator Standard Edition privilege escalation
MEDIUM (6.3)
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control vulnerability in the Sftp server adapter. IBM X-Force ID: 241362.
Published: 2023-01-04T17:21:07.011Z
Updated: 2025-04-10T13:55:59.298Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40232 |
vulnerable | 2026-06-08 05:48:24.359621 |
IBM Sterling B2B Integrator Standard Edition improper access control
MEDIUM (6.3)
IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.
Published: 2023-02-17T17:44:47.900Z
Updated: 2025-03-12T20:00:58.149Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34330 |
vulnerable | 2026-06-08 05:44:52.614866 |
IBM Sterling B2B Integrator cross-site scripting
MEDIUM (6.1)
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229469.
Published: 2023-01-04T17:07:29.311Z
Updated: 2025-04-10T13:57:58.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22371 |
vulnerable | 2026-06-08 05:40:53.673556 |
IBM Sterling B2B Integrator Standard Edition session fixation
MEDIUM (5.5)
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195.
Published: 2023-01-04T17:31:51.591Z
Updated: 2025-04-10T13:54:02.980Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22352 |
vulnerable | 2026-06-08 05:40:53.613854 |
IBM Sterling B2B Integrator Standard Edition cross-site scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220398.
Published: 2023-01-04T17:00:11.456Z
Updated: 2025-04-10T14:02:30.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22338 |
vulnerable | 2026-06-08 05:40:53.575539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22337 |
vulnerable | 2026-06-08 05:40:53.574971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38928 |
vulnerable | 2026-06-08 05:33:48.580337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.