PT-2013-5521
CVE-2013-5406
·
تاريخ النشر
2013-12-21
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator version 5.2
IBM Sterling File Gateway version 2.2
Description
The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters. This leads to improper interaction with the Windows MHTML protocol handler, potentially resulting in cross-site scripting (XSS) attacks.
Recommendations
For IBM Sterling B2B Integrator version 5.2, update to a version that addresses the XSS vulnerabilities.
For IBM Sterling File Gateway version 2.2, update to a version that addresses the XSS vulnerabilities.
As a temporary workaround, consider restricting access to unspecified parameters to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾