IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220398.
2023-01-04T18:15:08.947
2024-11-21T06:46:41.170
Modified
CVSSv3.1: 5.4 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | ibm | sterling_b2b_integrator | < 6.0.3.7 | Yes |
Application | ibm | sterling_b2b_integrator | < 6.1.0.6 | Yes |
Application | ibm | sterling_b2b_integrator | < 6.1.1.2 | Yes |
Application | ibm | sterling_b2b_integrator | 6.1.2.0 | Yes |