Description
IBM Sterling B2B Integrator是美国国际商业机器（IBM）公司的一套集成了重要的B2B流程、交易和关系的软件。该软件支持与不同的合作伙伴社区之间实现复杂的B2B流程的安全集成。 IBM Sterling B2B Integrator 中存在跨站脚本漏洞，该漏洞源于产品允许用户在web ui中嵌入任意javascript代码。攻击者可通过该漏洞导致会话凭证丢失。
IBM Sterling B2B Integrator 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.h3c.com/cn/d_201904/1428173_30003_0.htm
https://avd.aliyun.com/detail?id=AVD-2024-56338
https://www.cnvd.org.cn/patchInfo/show/653026
https://www.knowsafe.com/ti/info/0/1006500
https://www.sxxdckj.com/cms/a/IBM-Sterling-B2B-Integrator-kua-zhan-jue-ben-lou-dong-CNVD-2024-30211.html
https://zblog.zone.ci/?id=677462
https://cve.imfht.com/detail/CVE-2019-4258
https://cvepremium.circl.lu/vuln/cve-2024-40696
https://www.nsfocus.net/vulndb/61779
https://sec-consult.com/vulnerability-lab/advisory/reflected-cross-site-scripting-vulnerability-in-ibm-sterling-b2b-integrator/
https://www.ibm.com/support/pages/security-bulletin-ibm-sterling-b2b-integrator-vulnerable-cross-site-scripting-cve-2024-47116
https://www.exploit-db.com/exploits/45190