Known vulnerabilities in IBM Sterling B2B Integrator 6.2.0.2

Version: 6.2.0.2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_b2b_integrator:*:*:*:*:*:*:*:*
Total vulnerabilities: 103
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Sterling B2B Integrator version 6.2.0.2 IBM Sterling B2B Integrator 6.2.0.2 is affected by 103 vulnerabilities: 9 high, 57 medium, 37 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146415 - Improper input validation
CVE-2026-41854
CWE-20 Low
No
No
6.2.1.2.1, 6.2.2.1.1 31.08.2026 SB20260828154
SB20260917195
SB20260919172
#VU146411 - Improper input validation
CVE-2026-41853
CWE-20 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 31.08.2026 SB20260828154
SB20260917195
SB20260919172
#VU146286 - Exposure of sensitive information to an unauthorized actor
CVE-2026-41715
CWE-200 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 28.08.2026 SB20260828205
SB2026091611
SB2026091649
#VU146190 - Server-Side Request Forgery (SSRF)
CVE-2026-40999
CWE-918 High
No
No
6.2.1.2.1, 6.2.2.1.1 28.08.2026 SB20260828159
SB20260917195
#VU146174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41845
CWE-79 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 28.08.2026 SB20260828154
SB2026083181
SB2026083182
and 3 more
#VU146171 - Session Fixation
CVE-2026-41839
CWE-384 Low
No
No
6.2.1.2.1, 6.2.2.1.1 28.08.2026 SB20260828154
SB20260917195
SB20260919172
#VU146169 - Improper Access Control
CVE-2026-41841
CWE-284 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 28.08.2026 SB20260828154
SB20260917195
SB2026092115
#VU146166 - Missing release of memory after effective lifetime
CVE-2026-41840
CWE-401 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 28.08.2026 SB20260828154
SB20260917195
SB20260919172
#VU133913 - Resource exhaustion
CVE-2026-50560
CWE-400 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 5 more
#VU133461 - Allocation of Resources Without Limits or Throttling
CVE-2026-50011
CWE-770 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB2026070933
SB2026083136
and 2 more
#VU133456 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-50020
CWE-444 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 8 more
#VU133454 - Missing Release of Resource after Effective Lifetime
CVE-2026-44893
CWE-772 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB2026070933
SB20260825114
and 6 more
#VU133450 - Uncontrolled Memory Allocation
CVE-2026-45416
CWE-789 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070110
and 19 more
#VU133449 - Missing Release of Resource after Effective Lifetime
CVE-2026-45536
CWE-772 Low
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 3 more
#VU133443 - Improper Resource Shutdown or Release
CVE-2026-48006
CWE-404 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB2026070933
SB2026083141
and 3 more
#VU133441 - Missing Release of Resource after Effective Lifetime
CVE-2026-48043
CWE-772 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 13 more
#VU133440 - Missing release of memory after effective lifetime
CVE-2026-48059
CWE-401 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB2026070933
SB20260825114
and 6 more
#VU126710 - Resource exhaustion
CVE-2026-22745
CWE-400 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 21.04.2026 SB2026042162
SB2026052514
SB2026060904
and 3 more
#VU126709 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-22741
CWE-349 Low
No
No
6.2.1.2.1, 6.2.2.1.1 21.04.2026 SB2026042162
SB2026052514
SB20260528259
and 4 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Public exploit available
Exploited
6.2.1.2.1, 6.2.2.1.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more


Showing elements 1 - 20 out of 103