Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_b2b_integrator:6.1.0.0:*:*:*:standard:*:*:*

part: a version: 6.1.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc)
Edition*
Language*
Software editionstandard
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0835 vulnerable 2026-06-08 07:47:13.283721 Details available
MEDIUM (5.4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-13T18:57:35.435Z
Updated: 2026-03-13T19:36:39.022Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14504 vulnerable 2026-06-08 07:06:34.574993 IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-13T19:08:37.702Z
Updated: 2026-03-13T19:37:07.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42014 vulnerable 2026-06-08 06:11:07.688723 IBM Sterling B2B Integrator Standard Edition cross-site scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265511.
Published: 2024-06-27T18:00:42.773Z
Updated: 2024-08-02T19:16:49.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42011 vulnerable 2026-06-08 06:11:07.683513 IBM Sterling B2B Integrator Standard Edition tapjacking
MEDIUM (4.3)
IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. IBM X-Force ID: 265508.
Published: 2024-06-27T17:39:04.750Z
Updated: 2024-08-02T19:16:49.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20553 vulnerable 2026-06-08 05:29:09.459069 IBM Sterling B2B Integrator Standard Edition cross-site scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2024-12-18T23:39:03.856Z
Updated: 2024-12-19T16:39:07.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4762 vulnerable 2026-06-08 05:26:40.886013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4761 vulnerable 2026-06-08 05:26:40.884989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4728 vulnerable 2026-06-08 05:13:57.435575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.