Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.1:*:*:*:*:*:*:*

part: a version: 5.2.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1496 vulnerable 2026-06-08 05:09:22.454347 Details available
IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128694.
Published: 2017-07-31T21:00:00.000Z
Updated: 2024-09-17T02:51:46.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6020 vulnerable 2026-06-08 05:07:58.539496 Details available
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6199 vulnerable 2026-06-08 05:05:56.789615 Details available
The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request.
Published: 2015-01-10T02:00:00.000Z
Updated: 2024-08-06T12:10:12.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6146 vulnerable 2026-06-08 05:05:56.535732 Details available
IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.
Published: 2014-11-08T11:00:00.000Z
Updated: 2024-08-06T12:10:12.103Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.