CVE-2013-5406

IBM Sterling B2B Integrator 5.2 & Sterling File Gateway 2.2 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler.

References (4)

Core 4

Core References

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21657539

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/87355

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/64446

Various Sources vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1IC96055

Scores

EPSS 0.0095

EPSS Percentile 57.5%

Details

CWE

CWE-79

Status published

Products (2)

ibm/sterling_b2b_integrator 5.2

ibm/sterling_file_gateway 2.2

Published Dec 21, 2013

Tracked Since Feb 18, 2026