IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 207506.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HIBM Sterling B2b Integrator
APPIbm5.2.6.0 – 6.0.3.46.1.0.0 – 6.1.0.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
Related vulnerabilities
CVE-2015-7450CRITICAL9.8⚠ KEVPL ✓same product
RCE w produktach IBM via deserializacja Java (Apache Commons Collections)
CVE-2021-39085CRITICAL9.8PL ✓same product
SQL Injection w IBM Sterling B2B Integrator — nieautoryzowany dostęp do bazy danych
CVE-2021-29798CRITICAL9.8PL ✓same product
SQL Injection w IBM Sterling B2B Integrator — zdalny dostęp do bazy danych
CVE-2026-7769HIGH8.1PL ✓same product
SQL Injection w IBM Sterling B2B Integrator i IBM Sterling File Gateway
CVE-2025-14031HIGH7.5same product
IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0...