CVE-2012-5766

EUVD-2012-5649
Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than CVE-2013-0560.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
ibmsterling_b2b_integrator
5.1
ibmsterling_b2b_integrator
5.2
ibmsterling_file_gateway
2.1
ibmsterling_file_gateway
2.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84082
http://www-01.ibm.com/support/docview.wss?uid=swg21627982
http://www-01.ibm.com/support/docview.wss?uid=swg21640830
https://exchange.xforce.ibmcloud.com/vulnerabilities/80267
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84082
http://www-01.ibm.com/support/docview.wss?uid=swg21627982
http://www-01.ibm.com/support/docview.wss?uid=swg21640830
https://exchange.xforce.ibmcloud.com/vulnerabilities/80267