SQL Injection in IBM Sterling B2b Integrator

CVE-2013-0560

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766.

Vulnerability class: SQL Injection

EPSS: 0.010 (58.0th percentile) — read the EPSS interpretation.

Affected products

Ibm Sterling_b2b_integrator — versions 5.1, 5.2
Ibm Sterling_file_gateway — versions 2.1, 2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)