CVE-2019-4258: XSS
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159946.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4258?
CVE-2019-4258 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2019-4258?
To fix CVE-2019-4258, upgrade to a patched version of IBM Sterling B2B Integrator beyond 6.0.0.1.
What types of attacks can CVE-2019-4258 facilitate?
CVE-2019-4258 can facilitate cross-site scripting attacks that may lead to user credential disclosure within a trusted session.
Which versions of IBM Sterling B2B Integrator are affected by CVE-2019-4258?
CVE-2019-4258 affects IBM Sterling B2B Integrator versions 6.0.0.0 and 6.0.0.1.
How can CVE-2019-4258 impact users?
CVE-2019-4258 can impact users by allowing malicious scripts to execute in their browser, potentially compromising their login credentials.