← Back

Sterling B2b Integrator

sterling_b2b_integrator

Vendor: Ibm • 204 CVEs

CVEs (204)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-0210
1Ibm
1Sterling B2b Integrator
May 13, 2026
Feb 8, 2017
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server r...Show more
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP response.Show less
CVE-2016-6020
1Ibm
1Sterling B2b Integrator
May 13, 2026
Feb 1, 2017
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could...Show more
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.Show less
CVE-2016-5890
1Ibm
1Sterling B2b Integrator
May 6, 2026
Nov 30, 2016
N/A· v4
5.3 MEDIUM· v3
3.5 LOW· v2
IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote authenticated users to change arbitrary passwords via unspecified vectors.
CVE-2016-3057
1Ibm
1Sterling B2b Integrator
May 6, 2026
Nov 30, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-7450
1Ibm
7Sterling B2b Integrator
Sterling IntegratorTivoli Common Reporting+4 more
Apr 21, 2026
Jan 2, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java o...Show more
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.Show less
CVE-2015-7438
1Ibm
1Sterling B2b Integrator
May 6, 2026
Jan 2, 2016
N/A· v4
4.7 MEDIUM· v3
1.9 LOW· v2
IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access.
CVE-2015-7437
1Ibm
1Sterling B2b Integrator
May 6, 2026
Jan 2, 2016
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors.
CVE-2015-7431
1Ibm
1Sterling B2b Integrator
May 6, 2026
Jan 2, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2015-7410
1Ibm
1Sterling B2b Integrator
May 6, 2026
Jan 1, 2016
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspe...Show more
The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.Show less
CVE-2015-5019
1Ibm
2Sterling B2b Integrator
Sterling Integrator
May 6, 2026
Nov 8, 2015
N/A· v4
N/A· v3
5.5 MEDIUM· v2
IBM Sterling Integrator 5.1 before 5010004_8 and Sterling B2B Integrator 5.2 before 5020500_9 allow remote authenticated users to read or upload files by leveraging a password-change requirement.
CVE-2015-4992
1Ibm
1Sterling B2b Integrator
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
IBM Sterling B2B Integrator 5.2 before 5020500_8 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.
CVE-2014-6199
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
May 6, 2026
Jan 10, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request.
CVE-2014-6146
1Ibm
1Sterling B2b Integrator
May 6, 2026
Nov 8, 2014
N/A· v4
N/A· v3
1.9 LOW· v2
IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by read...Show more
IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.Show less
CVE-2014-6099
1Ibm
1Sterling B2b Integrator
May 6, 2026
Oct 26, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access vi...Show more
The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach.Show less
CVE-2013-5413
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Apr 29, 2026
Dec 21, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation.
CVE-2013-5411
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Apr 29, 2026
Dec 21, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors.
CVE-2013-5409
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Apr 29, 2026
Dec 21, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2013-5407
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Apr 29, 2026
Dec 21, 2013
N/A· v4
N/A· v3
4.9 MEDIUM· v2
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information...Show more
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue.Show less
CVE-2013-5406
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Apr 29, 2026
Dec 21, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, lea...Show more
Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler.Show less
CVE-2013-5405
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Apr 29, 2026
Dec 21, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.