Stored Cross-Site Scripting in IBM Sterling B2B Integrator Standard Edition
CVE-2024-31914

6.4MEDIUM

Key Information:

Vendor

IBM
Status
Sterling B2b Integrator Standard Edition
Vendor
CVE Published:
6 January 2025

What is CVE-2024-31914?

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 are affected by a stored cross-site scripting vulnerability. This security issue permits attackers to inject arbitrary JavaScript code into the web interface. Consequently, this could lead to unauthorized actions being executed within a user’s session, compromising sensitive information and potentially allowing for the disclosure of credentials while users are within a trusted environment.

Affected Version(s)

Sterling B2B Integrator Standard Edition 6.0.0.0 <= 6.1.2.5

Sterling B2B Integrator Standard Edition 6.2.0.0 <= 6.2.0.2

References

https://www.ibm.com/support/pages/node/7176081

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.