CVE-2019-4596: XSS
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 167879.
Other sources
IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4596?
The severity of CVE-2019-4596 is rated as medium due to its potential for cross-site scripting attacks that can compromise credentials.
How do I fix CVE-2019-4596?
To fix CVE-2019-4596, you should apply the latest patch provided by IBM for Sterling B2B Integrator.
Which versions are affected by CVE-2019-4596?
CVE-2019-4596 affects IBM Sterling B2B Integrator versions from 5.2.0.0 through 5.2.6.5.
What impact does CVE-2019-4596 have on users?
CVE-2019-4596 allows the embedding of arbitrary JavaScript code which can lead to credential disclosure within a trusted session.
Is CVE-2019-4596 specific to a certain environment or platform?
CVE-2019-4596 applies to the web user interface of IBM Sterling B2B Integrator regardless of the underlying operating system.