What’s Vulnerable › Vulnerabilities
CVE-2024-45089: IBM Sterling B2B Integrator information disclosure
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-01-31 · updated 2026-06-17
- Weakness: CWE-203
Description
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an observable discrepancy.
Affected products
- IBM Sterling B2B Integrator: from 6.0.0.0 through 6.1.2.5; from 6.2.0.0 through 6.2.0.3
References
Get alerted when CVE-2024-45089 or the next vulnerability affects your stack