Stored Cross-Site Scripting in IBM Sterling B2B Integrator Standard Edition

CVE-2024-31914

What is CVE-2024-31914?

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 are affected by a stored cross-site scripting vulnerability. This security issue permits attackers to inject arbitrary JavaScript code into the web interface. Consequently, this could lead to unauthorized actions being executed within a user’s session, compromising sensitive information and potentially allowing for the disclosure of credentials while users are within a trusted environment.

References