CVE-2017-1347

High

Published: 23/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Sterling B2B Integrator Standard Edition version 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows an attacker to access sensitive data and modify or delete it.

Recommendation

It is recommended to upgrade to the latest version of IBM Sterling B2B Integrator to mitigate this vulnerability and implement additional security measures such as input data filtering.

Other vulnerabilities in IBM Sterling B2B Integrator Standard Edition 5.2

CVE-2017-1174High
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

Original NVD description (English source)

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126462.