Not rated
CVE-2017-1192 IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
Description
IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling B2B Integrator 5.2 | 5.2 → 5.2.6 | No fix stated |
Other CVEs of Sterling B2B Integrator
The 136 CVEs of Sterling B2B Integrator →
CVE-2026-81209
Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
4.9
Medium
CVE-2026-19307
Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
4.3
Medium
CVE-2026-12737
IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability
4.4
Medium
CVE-2026-19273
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File…
5.4
Medium