CVE-2024-47103: XSS
First published: Thu Jan 30 2025(Updated: )
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM B2B Sterling Integrator | <=6.0.0.0 - 6.1.2.5 | |
| IBM B2B Sterling Integrator | <=6.2.0.0 - 6.2.0.3 | |
| >=6.0.0.0<=6.1.2.5 | ||
| >=6.2.0.0<=6.2.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-47103?
CVE-2024-47103 is classified as a high severity vulnerability due to its potential for privilege escalation and the ability to execute arbitrary code.
How do I fix CVE-2024-47103?
To fix CVE-2024-47103, upgrade IBM Sterling B2B Integrator to version 6.1.2.6 or later for versions 6.0.0.0 through 6.1.2.5, and to version 6.2.0.4 or later for versions 6.2.0.0 through 6.2.0.3.
Who is affected by CVE-2024-47103?
CVE-2024-47103 affects users of IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3.
What types of attacks can CVE-2024-47103 enable?
CVE-2024-47103 can enable cross-site scripting attacks, allowing attackers to execute malicious JavaScript code in the context of a privileged user's session.
What are the potential risks of CVE-2024-47103?
The potential risks of CVE-2024-47103 include unauthorized access, data manipulation, and loss of sensitive information due to the execution of harmful scripts.
- agent/first-publish-date
- agent/type
- agent/description
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/source
- agent/weakness
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/ibm
- canonical/ibm b2b sterling integrator
- version/ibm b2b sterling integrator/6.0.0.0 - 6.1.2.5
- version/ibm b2b sterling integrator/6.2.0.0 - 6.2.0.3
- version/ibm b2b sterling integrator/6.0.0.0
- version/ibm b2b sterling integrator/6.1.2.5
- version/ibm b2b sterling integrator/6.2.0.0
- version/ibm b2b sterling integrator/6.2.0.3