CVEvulnerability
CVE-2013-5406
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler.
Affected configurations
• ibm sterling b2b integrator 5.2
• ibm sterling file gateway 2.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC96055 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21657539 Vendor Advisory
- http://www.securityfocus.com/bid/64446 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87355 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC96055 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21657539 Vendor Advisory
- http://www.securityfocus.com/bid/64446 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87355 exchange.xforce.ibmcloud.com