VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jan 4, 2023· Updated Jun 17, 2026

CVE-2021-38928

CVE-2021-38928

Description

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Sterling B2b Integrator3 versions
    cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*+ 2 more
    • cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*range: >=6.0.0.0,<6.0.3.7
    • cpe:2.3:a:ibm:sterling_b2b_integrator:6.1.2.0:*:*:*:standard:*:*:*
    • (no CPE)range: 6.0.0.0
  • IBM/Sterling B2B Integrator Standard Editionllm-fuzzy
    Range: 6.0.0.0 - 6.1.2.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.