IBM Sterling B2B Integrator Standard Edition
21 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-56338 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-52905 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling B2B Integrator information disclosure | LOW 2.7 | 0.3 % | ||
| CVE-2023-50309 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2023-32340 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2024-31903 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.2 | IBM Sterling B2B Integrator Standard Edition code execution | HIGH 8.8 | 1.0 % | ||
| CVE-2024-31914 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.2 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 6.4 | 0.3 % | ||
| CVE-2024-31913 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.2 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-42010 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.2 | IBM Sterling B2B Integrator Standard Edition information disclosure | LOW 3.7 | 0.3 % | ||
| CVE-2023-42014 | 6.0.0.0 – 6.2.0.2 | IBM Sterling B2B Integrator Standard Edition cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-42011 | 6.1, 6.2 | IBM Sterling B2B Integrator Standard Edition tapjacking | MEDIUM 5.4 | 0.2 % | ||
| CVE-2023-25682 | 6.0.0.0 – 6.0.3.8 ; 6.1.0.0 – 6.1.2.1 | IBM Sterling B2B Integrator information disclosure | MEDIUM 6.2 | 0.2 % | ||
| CVE-2022-43578 | 6.0.0.0 – < 6.0.3.7 ; 6.1.0.0 – < 6.1.2.0 | IBM Sterling B2B Integrator Standard Edition cross-site scripting | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-40231 | 6.0.0.0 – < 6.0.3.7 ; 6.1.0.0 – < 6.1.2.0 | IBM Sterling B2B Integrator Standard Edition improper access control | HIGH 8.8 | 0.6 % | ||
| CVE-2022-43579 | 6.0.0.0 – < 6.0.3.7 ; 6.1.0.0 – < 6.1.2.0 | IBM Sterling B2B Integrator Standard Edition cross-site scripting | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-40232 | 6.1.0.0 – < 6.1.1.1 ; 6.1.2.0 | IBM Sterling B2B Integrator Standard Edition improper access control | HIGH 8.8 | 0.5 % | ||
| CVE-2022-22337 | 6.0.0.0 – < 6.1.2.1 | IBM Sterling B2B Integrator Standard Edition information disclosure | MEDIUM 6.5 | 0.5 % | ||
| CVE-2022-22338 | 6.0.0.0 – < 6.1.2.1 | IBM Sterling B2B Integrator Standard Edition SQL injection | CRITICAL 9.8 | 0.7 % | ||
| CVE-2022-22371 | 6.0.0.0 – < 6.1.2.1 | IBM Sterling B2B Integrator Standard Edition session fixation | MEDIUM 6.5 | 0.3 % | ||
| CVE-2021-38928 | 6.0.0.0 – < 6.1.2.1 | IBM Sterling B2B Integrator Standard Edition cross-origin resource sharing | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-43920 | 6.0.0.0 – < 6.1.2.1 | IBM Sterling B2B Integrator Standard Edition privilege escalation | HIGH 8.8 | 0.6 % | ||
| CVE-2022-22352 | 6.0.0.0 – < 6.1.2.1 | IBM Sterling B2B Integrator Standard Edition cross-site scripting | MEDIUM 5.4 | 0.4 % |