Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-35638 EUVD-2022-38519GHSA-9hfg-6hm4-8xp5

IBM Sterling B2B Integrator cross-site request forgery

Published Nov 22, 2023 · Updated Nov 21, 2024 · Assigned by ibm

Description

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230824.

Affected products

VendorProductAffectedFixed
IBM Sterling B2B Integrator 6.0.0.0 – ≤ 6.0.3.8, 6.1.0.0 – ≤ 6.1.2.1 —

References