CVE-2016-5893

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 115336.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Sterling B2B Integrator	5.2; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; 5.2.6

References

http://www.ibm.com/support/docview.wss?uid=swg22004272Patch, Vendor Advisory
http://www.securityfocus.com/bid/99228
https://exchange.xforce.ibmcloud.com/vulnerabilities/115336VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22004272Patch, Vendor Advisory
http://www.securityfocus.com/bid/99228
https://exchange.xforce.ibmcloud.com/vulnerabilities/115336VDB Entry, Vendor Advisory

Timeline

Published: Jun 23, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-58945.1IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A CVE-2016-58965.3IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser.CVE-2016-58975.4IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, wou CVE-2016-58984.3IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization CVE-2016-58995.4IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i CVE-2016-59005.9IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the CVE-2016-59015.4Cross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative f CVE-2016-59026.1IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the CVE-2016-59055.4Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote aut CVE-2016-59184.7IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the passwor CVE-2016-59197.5IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker CVE-2016-59205.4Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and