Threats tagged 'ghsa-hccv-7f3m-ww5h'

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows a privileged user to inject arbitrary JavaScript code into the web user interface, potentially altering its intended functionality. Exploitation could lead to the disclosure of credentials within a trusted session. The vulnerability is classified as CWE-79 and has a moderate severity rating. There is no information on available patches or vendor advisories at this time.