Skip to content
Sign in
6.1 Medium

CVE-2025-36066 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to…

Description

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2 5.2.0.00 → 5.2.0.12 No fix stated

Other CVEs of Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0

The 5 CVEs of Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 →
CVE-2025-36115 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session… 6.3 Medium CVE-2025-36113 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to… 5.4 Medium CVE-2025-36065 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate… 6.3 Medium CVE-2025-36063 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate… 6.3 Medium
Track this CVE