IBM Sterling B2B Integrator vulnerable to Cross-Site Scripting
CVE-2023-42014

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Sterling B2b Integrator Standard Edition
Vendor
CVE Published:
27 June 2024

What is CVE-2023-42014?

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.2.0.2 are exposed to a cross-site scripting issue that could allow authenticated users to inject arbitrary JavaScript code into the web interface. This manipulation of the web UI can compromise the expected functionality of the application and exposes users to potential credential disclosure risks during trusted sessions. Organizations using these versions must implement remediation strategies to protect against such threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Sterling B2B Integrator Standard Edition 6.0.0.0 <= 6.2.0.2

References

https://www.ibm.com/support/pages/node/7158654
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/265511
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.