CVE-2024-47103

Summary

CVE-2024-47103 is a newly disclosed cross-site scripting (XSS) vulnerability affecting the IBM Sterling B2B Integrator. Affected versions include Standard Edition of 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3. Privileged users can exploit this vulnerability by embedding arbitrary JavaScript code into the Web UI. This could alter the intended functionality and potentially lead to sensitive information, such as credentials, being disclosed within trusted sessions. IBM strongly advises users to update their systems as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.