{"id":"CVE-2019-4738","aliases":["EUVD-2019-14345","GHSA-796m-4rjr-9mvw"],"status":"published","title":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1...","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/C:L/UI:N/S:U/AV:N/I:N/AC:L/A:N/PR:L/RC:C/RL:O/E:U","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00545,"percentile":0.46189,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-312"],"published":"2020-12-10T22:11:06Z","modified":"2026-06-17T02:36:52Z","products":[{"vendor":"ibm","product":"sterling b2b integrator"},{"vendor":"ibm","product":"sterling_b2b_integrator"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6380390","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/172753","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-4738"},{"url":"https://github.com/advisories/GHSA-796m-4rjr-9mvw"}],"sources":{"cve":[{"id":"CVE-2019-4738","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.","status":"published","published":"2020-12-10T22:11:06.307Z","modified":"2024-09-17T03:19:07.522Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/C:L/UI:N/S:U/AV:N/I:N/AC:L/A:N/PR:L/RC:C/RL:O/E:U","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:20:25.303966Z"}],"euvd":[{"id":"EUVD-2019-14345","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.","status":"published","published":"2020-12-10T22:11:06Z","modified":"2024-09-17T03:19:07Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/C:L/UI:N/S:U/AV:N/I:N/AC:L/A:N/PR:L/RC:C/RL:O/E:U","level":"medium"}],"updated_at":"2026-11-03T00:28:32.482778Z"}],"ghsa":[{"id":"GHSA-796m-4rjr-9mvw","title":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1...","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.","status":"published","published":"2022-05-24T17:35:59Z","modified":"2023-01-29T05:05:35Z","cwes":["CWE-312"],"updated_at":"2026-11-02T14:45:49.842411Z"}],"nvd":[{"id":"CVE-2019-4738","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.","status":"published","published":"2020-12-10T23:15:10.99Z","modified":"2026-06-17T02:36:52.107Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:05:48.502374Z"}]}}