XSS in Ibm Sterling_b2b_integrator
CVE-2013-5406
Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper in…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.002 (39.5th percentile) — read the EPSS interpretation.
Affected products
- Ibm Sterling_b2b_integrator — versions 5.2
- Ibm Sterling_file_gateway — versions 2.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- ibm-sterling-cve20135406-mhtml-xss(87355) (vdb-entry, x_refsource_XF)
- 64446 (vdb-entry, x_refsource_BID)
- IC96055 (vendor-advisory, x_refsource_AIXAPAR)