Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_b2b_integrator:6.1.2.5:*:*:*:standard:*:*:*

part: a version: 6.1.2.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc)
Edition*
Language*
Software editionstandard
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49807 vulnerable 2026-06-08 06:50:14.711117 IBM Sterling B2B Integrator cross-site scripting
MEDIUM (6.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-31T15:25:27.961Z
Updated: 2025-01-31T15:50:22.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47116 vulnerable 2026-06-08 06:48:11.422067 IBM Sterling B2B Integrator cross-site scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-31T16:01:06.963Z
Updated: 2025-01-31T16:47:10.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47103 vulnerable 2026-06-08 06:48:11.376803 IBM Sterling B2B Integrator cross-site scripting
MEDIUM (4.8)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-31T15:24:33.527Z
Updated: 2025-01-31T15:58:05.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45089 vulnerable 2026-06-08 06:45:54.556038 IBM Sterling B2B Integrator information disclosure
MEDIUM (4.3)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an observable discrepancy.
Published: 2025-01-31T15:58:53.150Z
Updated: 2025-01-31T16:47:45.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40696 vulnerable 2026-06-08 06:43:53.030399 IBM Sterling B2B Integrator cross-site scripting
MEDIUM (4.8)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-31T15:24:52.928Z
Updated: 2025-01-31T15:54:41.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31914 vulnerable 2026-06-08 06:35:32.393811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31913 vulnerable 2026-06-08 06:35:32.393333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31903 vulnerable 2026-06-08 06:35:32.366511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27263 vulnerable 2026-06-08 06:31:28.358330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50316 vulnerable 2026-06-08 06:16:15.943128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50309 vulnerable 2026-06-08 06:16:15.921069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38739 vulnerable 2026-06-08 06:08:18.779756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32340 vulnerable 2026-06-08 06:04:45.570043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.