Search Results (5 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-36115 1 Ibm 1 Sterling Connectexpress Adapter For Sterling B2b Integrator 520 2026-01-20 6.3 Medium
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
CVE-2025-36113 1 Ibm 1 Sterling Connectexpress Adapter For Sterling B2b Integrator 520 2026-01-20 5.4 Medium
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2025-36066 1 Ibm 1 Sterling Connectexpress Adapter For Sterling B2b Integrator 520 2026-01-20 6.1 Medium
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2025-36065 1 Ibm 1 Sterling Connectexpress Adapter For Sterling B2b Integrator 520 2026-01-20 6.3 Medium
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.
CVE-2025-36063 1 Ibm 1 Sterling Connectexpress Adapter For Sterling B2b Integrator 520 2026-01-20 6.3 Medium
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.