CVE-2019-4077: XSS

Published Apr 25, 2019

Updated

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157111.

Affected Software

2 affected components

IBM Sterling B2B Integrator=6.0.0.0

IBM Sterling B2B Integrator=6.0.0.1

Event History

Apr 25, 2019

CVE Published

via MITRE·02:36 PM

Data Sourced

via MITRE·02:36 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-4077?

CVE-2019-4077 is classified as a high severity cross-site scripting vulnerability that can allow execution of arbitrary JavaScript code.

How do I fix CVE-2019-4077?

To fix CVE-2019-4077, users should update to the latest patch or version of IBM Sterling B2B Integrator that addresses the vulnerability.

What versions are affected by CVE-2019-4077?

CVE-2019-4077 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 and 6.0.0.1.

What type of attack can CVE-2019-4077 facilitate?

CVE-2019-4077 can facilitate attacks that result in credentials disclosure within a trusted session through the embedding of malicious scripts.

Who is impacted by CVE-2019-4077?

Users of IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 and 6.0.0.1 are impacted by CVE-2019-4077.