CVE-2017-1482: XSS

Published Dec 7, 2017

Updated

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128620.

Affected Software

1 affected component

IBM Sterling B2B Integrator=5.2

Event History

Dec 7, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1482?

CVE-2017-1482 is classified as a medium severity vulnerability due to its potential to allow arbitrary JavaScript code execution.

How do I fix CVE-2017-1482?

To fix CVE-2017-1482, update to the latest version of IBM Sterling B2B Integrator that addresses this vulnerability.

What type of attack does CVE-2017-1482 facilitate?

CVE-2017-1482 facilitates cross-site scripting (XSS) attacks, allowing attackers to execute malicious scripts in a trusted user's session.

Is CVE-2017-1482 specific to a certain version of IBM Sterling B2B Integrator?

Yes, CVE-2017-1482 specifically affects IBM Sterling B2B Integrator version 5.2.

What impacts can result from CVE-2017-1482?

The impact of CVE-2017-1482 can include unauthorized access to sensitive information, such as user credentials, as a result of executing malicious scripts.