CVE-2019-4043high

CVE-2019-4043: high-severity vulnerability in IBM Sterling B2B Integrator

Published · Updated

Follow this CVE+ Monitor Sterling B2B Integrator

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 2.4%
IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239.
CVSS:3.0/AV:N/PR:L/AC:L/S:U/C:H/UI:N/I:N/A:L/E:U/RL:O/RC:C
Affected products
IBM · Sterling B2B Integrator
Related CVEs — IBM Sterling B2B Integrator

In the same product, most dangerous first.

CVE-2019-4728HIGHCVE-2019-4728EPSS 5.2%CVE-2018-1513MEDIUMCVE-2018-1513EPSS 2.9%CVE-2017-1192—CVE-2017-1192EPSS 2.3%CVE-2018-1679MEDIUMCVE-2018-1679EPSS 1.8%CVE-2017-1633MEDIUMCVE-2017-1633EPSS 1.7%CVE-2017-1174—CVE-2017-1174EPSS 1.5%