Sterling B2B Integrator 5.2.4
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.4:*:*:*:*:*:*:*
part: a version: 5.2.4 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1496 |
vulnerable | 2026-06-08 05:09:22.456138 |
Details available
IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128694.
Published: 2017-07-31T21:00:00.000Z
Updated: 2024-09-17T02:51:46.667Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6020 |
vulnerable | 2026-06-08 05:07:58.540788 |
Details available
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.633Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6199 |
vulnerable | 2026-06-08 05:05:56.789655 |
Details available
The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request.
Published: 2015-01-10T02:00:00.000Z
Updated: 2024-08-06T12:10:12.943Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6146 |
vulnerable | 2026-06-08 05:05:56.536338 |
Details available
IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.
Published: 2014-11-08T11:00:00.000Z
Updated: 2024-08-06T12:10:12.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6099 |
vulnerable | 2026-06-08 05:05:56.270862 |
Details available
The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach.
Published: 2014-10-26T18:00:00.000Z
Updated: 2024-08-06T12:03:02.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4002 |
vulnerable | 2026-06-08 05:04:33.483320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0455 |
vulnerable | 2026-06-08 05:03:48.102488 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.