CVE-2022-40232: IBM Sterling B2B Integrator Standard Edition improper access control

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-17 · updated 2026-06-17
Weakness: CWE-276

Description

IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.

Affected products

IBM Sterling B2B Integrator: from 6.1.0.0 through 6.1.1.1; 6.1.2.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/235597
https://www.ibm.com/support/pages/node/6954465
https://exchange.xforce.ibmcloud.com/vulnerabilities/235597
https://www.ibm.com/support/pages/node/6954465

Get alerted when CVE-2022-40232 or the next vulnerability affects your stack