Cross site scripting

2023-01-0418:15:00

PRIOn knowledge base

www.prio-n.com

ibm sterling

b2b integrator

cors

privilege escalation

security vulnerability

5.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323.

CPENameOperatorVersion
sterling_b2b_integratorge6.1.1.0
sterling_b2b_integratorlt6.1.1.2
sterling_b2b_integratoreq6.1.2.0
sterling_b2b_integratorge6.1.0.0
sterling_b2b_integratorlt6.1.0.6
sterling_b2b_integratorge6.0.0.0
sterling_b2b_integratorlt6.0.3.7

Name	Operator	Version
sterling_b2b_integrator	ge	6.1.1.0
sterling_b2b_integrator	lt	6.1.1.2
sterling_b2b_integrator	eq	6.1.2.0
sterling_b2b_integrator	ge	6.1.0.0
sterling_b2b_integrator	lt	6.1.0.6
sterling_b2b_integrator	ge	6.0.0.0
sterling_b2b_integrator	lt	6.0.3.7