ibm.comConfirmation
http://www.ibm.com/support/docview.wss?uid=ibm10717031 CVE-2018-1513
MEDIUM
IBM Sterling B2B Integrator 5.2.0.1/5.2.6.3 - Cross-Site Scripting
Record summary
CVE-2018-1513 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.
Description
IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141551.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Sterling B2B IntegratorBrowse IBM / Sterling B2B Integrator | CVE List | 5.2.6 | affected |
| 5.2.0 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBIBM Sterling B2B Integrator 5.2.0.1/5.2.6.3 - Cross-Site ScriptingExploitDB exploitby Vikas KhannaNot analyzed1 file
References
5104910vdb entry
http://www.securityfocus.com/bid/104910 ibm-sterling-cve20181513-xss(141551)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/141551 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-1513 45190exploit
https://www.exploit-db.com/exploits/45190