Vulnerabilities > IBM > Sterling B2B Integrator > 5.0

DATE CVE VULNERABILITY TITLE RISK
2021-10-07 CVE-2021-20372 Unspecified vulnerability in IBM Sterling B2B Integrator
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking.
network
low complexity
ibm
4.3
2021-10-07 CVE-2021-20375 Unspecified vulnerability in IBM Sterling B2B Integrator
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls.
network
low complexity
ibm
6.5
2021-10-07 CVE-2021-20376 Information Exposure Through Discrepancy vulnerability in IBM Sterling B2B Integrator
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages.
network
low complexity
ibm CWE-203
4.3
2021-10-07 CVE-2021-20561 Cross-site Scripting vulnerability in IBM Sterling B2B Integrator
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1
2021-10-07 CVE-2021-20584 Unspecified vulnerability in IBM Sterling B2B Integrator
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls.
network
low complexity
ibm
7.5