IBM Sterling B2B Integrator vulnerable to Cross-Site Scripting
CVE-2023-42014

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Sterling B2b Integrator Standard Edition
Vendor
CVE Published:
27 June 2024

Summary

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.2.0.2 are exposed to a cross-site scripting issue that could allow authenticated users to inject arbitrary JavaScript code into the web interface. This manipulation of the web UI can compromise the expected functionality of the application and exposes users to potential credential disclosure risks during trusted sessions. Organizations using these versions must implement remediation strategies to protect against such threats.

Affected Version(s)

Sterling B2B Integrator Standard Edition 6.0.0.0 <= 6.2.0.2

References

https://www.ibm.com/support/pages/node/7158654
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/265511
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.