IBM Corporation Sterling B2B Integrator vulnerabilities

2 vulnerabilities

Known vulnerabilities in IBM Corporation Sterling B2B Integrator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2016-0210ibm corporationsterling b2b integrator+1
EPSS score
1.70%
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP response.6.1CVE-2016-6020ibm corporationsterling b2b integrator+1
EPSS score
0.80%
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.