CVE-2020-4705: XSS
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187190.
Other sources
IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4705?
CVE-2020-4705 is classified as a high severity vulnerability due to its potential impact on user data and application integrity.
How do I fix CVE-2020-4705?
To fix CVE-2020-4705, users should apply the patches provided by IBM for the affected versions of the Sterling B2B Integrator.
Which versions are affected by CVE-2020-4705?
CVE-2020-4705 affects IBM Sterling B2B Integrator versions 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2.
What impact does CVE-2020-4705 have?
CVE-2020-4705 allows an attacker to execute arbitrary JavaScript code in the web user interface, potentially leading to credential disclosure and unauthorized actions.
Is there a workaround for CVE-2020-4705?
There is no official workaround for CVE-2020-4705; the recommended action is to apply the latest patches from IBM.