CVE-2021-29798

State: Published
Severity: 6.3 Medium
Published: Oct 6, 2021
Updated: Sep 17, 2024
Reserved: Mar 31, 2021

Description

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734.

Scores

CVSS	Score	Vector	Source
3.0	6.3 Medium	CVSS:3.0/UI:N/AV:N/I:L/S:U/AC:L/C:L/A:L/PR:L/E:U/RC:C/RL:O	ibm

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Sterling B2B IntegratorIBM	6.0.0.0Affected 6.1.0.0Affected 6.0.3.4Affected 6.1.0.3Affected

References

https://www.ibm.com/support/pages/node/6495925
ibm-sterling-cve202129798-sql-injection (203734)vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.