CVE-2023-42011: IBM Sterling B2B Integrator Standard Edition tapjacking

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-27 · updated 2026-06-17
Weakness: CWE-1021

Description

IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. IBM X-Force ID: 265508.

Affected products

IBM Sterling B2B Integrator: 6.1, 6.2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/265508
https://www.ibm.com/support/pages/node/7158657
https://exchange.xforce.ibmcloud.com/vulnerabilities/265508
https://www.ibm.com/support/pages/node/7158657

Get alerted when CVE-2023-42011 or the next vulnerability affects your stack