CVE-2013-5406

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 IBM Sterling File Gateway version 2.2

Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters. This leads to improper interaction with the Windows MHTML protocol handler, potentially resulting in cross-site scripting (XSS) attacks.

Recommendations For IBM Sterling B2B Integrator version 5.2, update to a version that addresses the XSS vulnerabilities. For IBM Sterling File Gateway version 2.2, update to a version that addresses the XSS vulnerabilities. As a temporary workaround, consider restricting access to unspecified parameters to minimize the risk of exploitation.