CVE-2019-4148: XSS

Published Apr 25, 2019

Updated

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158414.

Affected Software

2 affected components

IBM Sterling B2B Integrator=6.0.0.0

IBM Sterling B2B Integrator=6.0.0.1

Event History

Apr 25, 2019

CVE Published

via MITRE·02:36 PM

Data Sourced

via MITRE·02:36 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-4148?

CVE-2019-4148 has a medium severity rating due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2019-4148?

To mitigate CVE-2019-4148, upgrade to IBM Sterling B2B Integrator version 6.0.0.2 or later where the vulnerability is addressed.

What types of attacks can CVE-2019-4148 enable?

CVE-2019-4148 can enable attackers to execute arbitrary JavaScript in the web UI, potentially leading to credential theft.

Is CVE-2019-4148 specific to certain versions of IBM Sterling B2B Integrator?

Yes, CVE-2019-4148 specifically affects IBM Sterling B2B Integrator versions 6.0.0.0 and 6.0.0.1.

Who is affected by CVE-2019-4148?

Organizations using IBM Sterling B2B Integrator versions 6.0.0.0 or 6.0.0.1 are at risk of CVE-2019-4148.