CVEvulnerability
CVE-2012-5766
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than CVE-2013-0560.
Affected configurations
• ibm sterling b2b integrator 5.1
• ibm sterling b2b integrator 5.2
• ibm sterling file gateway 2.1
• ibm sterling file gateway 2.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC84082 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21627982 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80267 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC84082 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21627982 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80267 exchange.xforce.ibmcloud.com