IBM Sterling B2B Integrator
133 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-19273 | 6.2.0.0 – 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control | MEDIUM 5.4 | 0.4 % | ||
| CVE-2025-36431 | 6.2.2.0 – 6.2.2.0_1 | XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-36298 | 6.1.2.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; … | Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-1918 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-3157 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-3158 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-7362 | 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-7769 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway | HIGH 8.1 | 0.5 % | ||
| CVE-2026-7775 | 6.2.0.0 – 6.2.0.6 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-3482 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-7253 | 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | IBM Sterling File Gateway SQL Injection | HIGH 8.8 | 0.4 % | ||
| CVE-2026-1264 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_1 ; 6.2.1.0 – 6.2.1.1_1 ; … | IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls | HIGH 7.1 | 0.2 % | ||
| CVE-2025-14031 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_1 ; 6.2.1.0 – 6.2.1.1_1 ; … | IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service | HIGH 7.5 | 0.4 % | ||
| CVE-2025-36368 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_1 ; 6.2.1.0 – 6.2.1.1_1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection | HIGH 7.2 | 0.3 % | ||
| CVE-2023-40693 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_1 ; 6.2.1.0 – 6.2.1.1_1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-14483 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_1 ; 6.2.1.0 – 6.2.1.1_1 ; … | IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-14504 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_1 ; 6.2.1.0 – 6.2.1.1_1 ; … | IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-0835 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_1 ; 6.2.1.0 – 6.2.1.1_1 ; … | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, a | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-36348 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5 ; 6.2.1.0 – 6.2.1.1 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-36134 | 6.0.0.0 – 6.1.2.7 ; 6.2.0.0 – 6.2.0.5 ; 6.2.1.1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure | HIGH 7.5 | 0.3 % | ||
| CVE-2025-36112 | 6.0.0.0 – 6.1.2.7 ; 6.2.0.0 – 6.2.0.5 ; 6.2.1.1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure | MEDIUM 5.3 | 0.3 % | ||
| CVE-2025-36135 | 6.0.0.0 – 6.1.2.7_1 ; 6.2.0.0 – 6.2.0.5 ; 6.2.1.0 | IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-36002 | 6.2.0.0 – 6.2.0.5 ; 6.2.1.0 | IBM Sterling B2B Integrator information disclosure | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-2667 | 6.0.0.0 – 6.1.2.7_1 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator information disclosure | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-2694 | 6.0.0.0 – 6.1.2.7_1 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-2988 | 6.0.0.0 – 6.1.2.7 ; 6.2.0.0 – 6.2.0.4 ; 6.2.1.0 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-33008 | 6.2.1.0 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-33014 | 6.0.0.0 – 6.1.2.7 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-2793 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-3630 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2025-1349 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-1348 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure | MEDIUM 4.0 | 0.1 % | ||
| CVE-2024-54172 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site request forgery | MEDIUM 4.3 | 0.1 % | ||
| CVE-2024-54183 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2024-47116 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2024-45089 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling B2B Integrator information disclosure | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-49807 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2024-40696 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2024-47103 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2023-38739 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling B2B Integrator cross-site request forgery | HIGH 8.8 | 0.2 % | ||
| CVE-2023-50316 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.1 | IBM Sterling B2B Integrator information disclosure | CRITICAL 9.8 | 0.4 % | ||
| CVE-2024-27263 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.1 | IBM Sterling B2B Integrator information disclosure | MEDIUM 5.3 | 0.3 % | ||
| CVE-2021-20553 | 5.2.0.0 – 5.2.6.5 ; 6.0.0.0 – 6.0.0.6 ; 6.0.1.0 – 6.0.3.4 ; … | IBM Sterling B2B Integrator Standard Edition cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-45186 | 6.0.0.0 – 6.0.3.9 ; 6.1.0.0 – 6.1.2.3 ; 6.2.0.0 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-50307 | 6.0.0.0 – 6.0.3.9 ; 6.1.0.0 – 6.1.2.3 ; 6.2.0.0 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-22357 | 6.0.0.0 – 6.0.3.9 ; 6.1.0.0 – 6.1.2.3 ; 6.2.0.0 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-42016 | 6.0.0.0 – 6.0.3.8 ; 6.1.0.0 – 6.1.2.3 | IBM Sterling B2B Integrator information disclosure | MEDIUM 4.3 | 0.3 % | ||
| CVE-2023-32341 | 6.0.0.0 – 6.0.3.8 ; 6.1.0.0 – 6.1.2.3 | IBM Sterling B2B Integrator denial of service | MEDIUM 6.5 | 0.6 % | ||
| CVE-2022-35638 | 6.0.0.0 – 6.0.3.8 ; 6.1.0.0 – 6.1.2.1 | IBM Sterling B2B Integrator cross-site request forgery | HIGH 8.8 | 0.3 % | ||
| CVE-2023-22876 | 6.0.0.0 – < 6.0.3.7 ; 6.1.0.0 – < 6.1.2.1 | IBM Sterling B2B Integrator information disclosure | MEDIUM 6.5 | 0.5 % | ||
| CVE-2022-34330 | 6.0.0.0 – < 6.1.2.1 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 6.1 | 0.4 % | ||
| CVE-2021-39087 | 6.0.0.0 ; 6.1.0.0 ; 6.1.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an au | MEDIUM 6.5 | 0.7 % | ||
| CVE-2021-39085 | 6.0.0.0 ; 6.1.0.0 ; 6.1.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to | CRITICAL 9.8 | 0.9 % | ||
| CVE-2021-39035 | 6.0.0.0 ; 6.1.0.0 ; 6.1.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to | MEDIUM 5.4 | 0.5 % | ||
| CVE-2021-38954 | 6.0.0.0 ; 6.1.0.0 ; 6.1.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version informatio | MEDIUM 4.3 | 0.7 % | ||
| CVE-2022-22482 | 6.0.0.0 ; 6.1.0.0 ; 6.1.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload | MEDIUM 6.5 | 1.0 % | ||
| CVE-2021-39033 | 6.0.0.0 ; 6.1.0.0 ; 6.1.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sen | MEDIUM 6.5 | 1.0 % | ||
| CVE-2020-4668 | 6.0.0.0 ; 6.1.0.0 ; 6.1.0.3 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site reque | HIGH 8.8 | 0.4 % | ||
| CVE-2021-29700 | 6.0.0.0 ; 5.2.0.0 ; 6.0.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information f | MEDIUM 4.3 | 0.9 % | ||
| CVE-2021-20571 | 6.0.0.0 ; 5.2.0.0 ; 6.0.1.0 ; … | IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed a | MEDIUM 5.4 | 0.5 % | ||
| CVE-2021-38925 | 5.2.0.0 ; 6.1.0.0 ; 6.0.3.4 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an | HIGH 7.5 | 0.7 % | ||
| CVE-2021-29903 | 5.2.0.0 ; 6.1.0.0 ; 6.0.3.4 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially | CRITICAL 9.8 | 1.1 % | ||
| CVE-2021-29855 | 5.2.0.0 ; 6.1.0.0 ; 6.0.3.4 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users | MEDIUM 5.4 | 0.5 % | ||
| CVE-2021-29837 | 5.2.0.0 ; 6.1.0.0 ; 6.0.3.4 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attack | HIGH 8.8 | 0.4 % | ||
| CVE-2021-29836 | 6.0.0.0 ; 6.0.1.0 ; 6.1.0.0 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users | MEDIUM 5.4 | 0.5 % | ||
| CVE-2021-29798 | 6.0.0.0 ; 6.1.0.0 ; 6.0.3.4 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially | CRITICAL 9.8 | 1.1 % | ||
| CVE-2021-29764 | 5.2.0.0 ; 6.1.0.0 ; 6.0.3.4 ; … | IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed a | MEDIUM 6.4 | 0.5 % | ||
| CVE-2021-29761 | 6.0.0.0 ; 5.2.0.0 ; 6.0.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from | MEDIUM 4.3 | 0.7 % | ||
| CVE-2021-29760 | 6.0.0.0 ; 5.2.0.0 ; 6.0.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files throug | MEDIUM 5.4 | 0.6 % | ||
| CVE-2021-29758 | 6.0.0.0 ; 5.2.0.0 ; 6.0.1.0 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should n | MEDIUM 4.3 | 0.6 % | ||
| CVE-2021-20562 | 5.2.0.0 ; 6.1.0.0 ; 6.1.0.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This | MEDIUM 5.4 | 0.9 % | ||
| CVE-2020-4646 | 6.0.0.0 ; 5.2.0.0 ; 5.2.6.5 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an au | MEDIUM 4.3 | 0.7 % | ||
| CVE-2020-4762 | 6.0.0.0 ; 5.2.0.0 ; 6.0.3.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated us | HIGH 8.8 | 1.3 % | ||
| CVE-2020-4761 | 6.0.0.0 ; 5.2.0.0 ; 6.0.3.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker t | MEDIUM 5.3 | 1.3 % | ||
| CVE-2019-4728 | 6.0.0.0 ; 5.2.0.0 ; 6.0.3.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker t | HIGH 8.8 | 5.2 % | ||
| CVE-2020-4657 | 5.2.0.0 ; 6.0.3.2 | IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users | MEDIUM 6.1 | 0.7 % | ||
| CVE-2019-4738 | 6.0.0.0 ; 5.2.0.0 ; 5.2.6.5 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authe | MEDIUM 6.5 | 0.5 % | ||
| CVE-2020-4937 | 5.2.0.0 ; 6.0.3.2 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an | HIGH 7.5 | 0.8 % | ||
| CVE-2020-4705 | 5.2.0.0 ; 6.0.3.2 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This | MEDIUM 4.8 | 0.6 % | ||
| CVE-2020-4700 | 6.0.0.0 ; 5.2.0.0 ; 5.2.6.5 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging | HIGH 8.8 | 1.2 % | ||
| CVE-2020-4692 | 6.0.0.0 ; 5.2.0.0 ; 5.2.6.5 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain | MEDIUM 6.5 | 0.9 % | ||
| CVE-2020-4671 | 6.0.0.0 ; 5.2.0.0 ; 5.2.6.5 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in | MEDIUM 6.5 | 1.0 % | ||
| CVE-2020-4655 | 6.0.0.0 ; 5.2.0.0 ; 5.2.6.5 ; … | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote at | HIGH 8.8 | 1.3 % | ||
| CVE-2020-4566 | 5.2.6.0 ; 6.0.0.0 ; 5.2.6.5 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive informa | MEDIUM 6.5 | 1.0 % | ||
| CVE-2020-4475 | 6.0.0.0 ; 5.2.0.0 ; 5.2.6.5 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sen | MEDIUM 6.5 | 1.1 % | ||
| CVE-2020-4564 | 5.2.0.0 ; 6.0.3.1 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to | MEDIUM 5.4 | 0.7 % | ||
| CVE-2019-4680 | 5.2.0.0 ; 6.0.2.2 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially- | HIGH 8.8 | 1.0 % | ||
| CVE-2020-4299 | 5.2.0.0 ; 6.0.3.1 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafte | MEDIUM 4.3 | 1.0 % | ||
| CVE-2020-4312 | 5.2.0.0 ; 6.0.3.1 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a | MEDIUM 4.3 | 0.8 % | ||
| CVE-2019-4726 | 5.2.0.0 ; 5.2.6.5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attack | MEDIUM 4.3 | 0.5 % | ||
| CVE-2019-4598 | 5.2.0.0 ; 5.2.6.5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially- | MEDIUM 6.3 | 0.8 % | ||
| CVE-2019-4597 | 5.2.0.0 ; 5.2.6.5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially- | MEDIUM 6.3 | 0.8 % | ||
| CVE-2019-4596 | 5.2.0.0 ; 5.2.6.5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-4595 | 5.2.0.0 ; 5.2.6.5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote attacker to conduct phishing attacks, using an ope | MEDIUM 6.8 | 0.7 % | ||
| CVE-2019-4387 | 6.0.0.0 ; 6.0.2.0 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection. A remote attacker could send specially- | HIGH 8.8 | 1.0 % | ||
| CVE-2019-4377 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks again | MEDIUM 4.3 | 1.3 % | ||
| CVE-2019-4258 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to e | MEDIUM 5.4 | 1.0 % | ||
| CVE-2019-4222 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to view process definition of a business | MEDIUM 4.3 | 1.2 % | ||
| CVE-2019-4148 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-4146 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to obtain sensitive document information | LOW 3.1 | 1.1 % | ||
| CVE-2019-4077 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e | MEDIUM 5.4 | 0.7 % | ||
| CVE-2019-4076 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e | MEDIUM 5.4 | 0.7 % | ||
| CVE-2019-4075 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e | MEDIUM 5.4 | 0.7 % | ||
| CVE-2019-4074 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e | MEDIUM 5.4 | 0.7 % | ||
| CVE-2019-4073 | 6.0.0.0 ; 6.0.0.1 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e | MEDIUM 5.4 | 0.7 % | ||
| CVE-2018-1720 | 5.2.0.1 ; 6.0.0.0 ; 5.2.6.3_6 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms tha | HIGH 7.5 | 1.0 % | ||
| CVE-2019-4043 | 5.2.0 ; 6.0.0.0 | IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processin | HIGH 7.1 | 2.4 % | ||
| CVE-2019-4063 | 5.2.0.1 ; 6.0.0.0 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain tex | MEDIUM 5.9 | 1.0 % | ||
| CVE-2019-4029 | 5.2.0.1 ; 6.0.0.0 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar | MEDIUM 5.4 | 1.0 % | ||
| CVE-2019-4028 | 5.2.0.1 ; 6.0.0.0 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar | MEDIUM 5.4 | 1.0 % | ||
| CVE-2019-4027 | 5.2.0.1 ; 6.0.0.0 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar | MEDIUM 5.4 | 1.0 % | ||
| CVE-2018-1800 | 5.2.6.3 ; 5.2.6.0 | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a sh | MEDIUM 5.1 | 0.3 % | ||
| CVE-2018-1718 | 5.2.0.1 ; 5.2.6.3 | IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to emb | MEDIUM 5.4 | 1.2 % | ||
| CVE-2018-1513 | 5.2.6 ; 5.2.0 | IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to e | MEDIUM 5.4 | 2.9 % | ||
| CVE-2018-1679 | 5.2 ; 5.2.4 ; 5.2.1 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive information that coul | MEDIUM 5.3 | 1.8 % | ||
| CVE-2018-1564 | 5.2 ; 5.2.4 ; 5.2.1 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwor | MEDIUM 6.7 | 0.4 % | ||
| CVE-2017-1633 | 5.2 ; 5.2.4 ; 5.2.1 ; … | IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using spec | MEDIUM 4.3 | 1.7 % | ||
| CVE-2017-1482 | 5.2 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1481 | 5.2 | IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user. IBM X-Force ID: 1 | MEDIUM 4.3 | 0.9 % | ||
| CVE-2017-1192 | 5.2 ; 5.2.4 ; 5.2.1 ; … | IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker c | HIGH 8.2 | 2.3 % | ||
| CVE-2017-1174 | 5.2 ; 5.2.4 ; 5.2.1 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statemen | HIGH 8.8 | 1.5 % | ||
| CVE-2017-1496 | 5.2 ; 5.2.4 ; 5.2.1 ; … | IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary | MEDIUM 5.4 | 0.5 % | ||
| CVE-2017-1349 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local u | MEDIUM 5.5 | 0.3 % | ||
| CVE-2017-1348 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1347 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statemen | HIGH 8.8 | 1.5 % | ||
| CVE-2017-1302 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls. IBM X- | MEDIUM 5.5 | 0.3 % | ||
| CVE-2017-1193 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request. IBM X-Force ID: | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-1132 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1131 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, spe | MEDIUM 6.5 | 1.4 % | ||
| CVE-2016-5893 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system. IBM | MEDIUM 5.5 | 0.3 % | ||
| CVE-2017-1326 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related t | MEDIUM 4.3 | 0.8 % | ||
| CVE-2016-9983 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should no | MEDIUM 5.3 | 1.1 % | ||
| CVE-2016-9982 | 5.2 ; 5.2.1 ; 5.2.2 ; … | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due | MEDIUM 6.5 | 1.2 % |