{"id":"CVE-2021-39087","aliases":["EUVD-2021-25524","GHSA-7fxj-2493-4xp2"],"status":"published","title":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4,...","description":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AC:L/UI:N/A:N/I:N/PR:L/S:U/C:L/AV:N/RC:C/RL:O/E:U","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00678,"percentile":0.52758,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2022-08-16T18:46:04Z","modified":"2026-06-17T04:03:04Z","products":[{"vendor":"ibm","product":"sterling b2b integrator"},{"vendor":"ibm","product":"sterling_b2b_integrator"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6612541","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/216109","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39087"},{"url":"https://github.com/advisories/GHSA-7fxj-2493-4xp2"}],"sources":{"cve":[{"id":"CVE-2021-39087","description":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.","status":"published","published":"2022-08-16T18:46:04.273Z","modified":"2024-09-17T03:17:43.317Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AC:L/UI:N/A:N/I:N/PR:L/S:U/C:L/AV:N/RC:C/RL:O/E:U","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:09.540052Z"}],"euvd":[{"id":"EUVD-2021-25524","description":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.","status":"published","published":"2022-08-16T18:46:04Z","modified":"2024-09-17T03:17:43Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AC:L/UI:N/A:N/I:N/PR:L/S:U/C:L/AV:N/RC:C/RL:O/E:U","level":"medium"}],"updated_at":"2026-11-03T00:28:33.372362Z"}],"ghsa":[{"id":"GHSA-7fxj-2493-4xp2","title":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4,...","description":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.","status":"published","published":"2022-08-17T00:00:18Z","modified":"2023-01-29T05:05:44Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:45:51.862752Z"}],"nvd":[{"id":"CVE-2021-39087","description":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.","status":"published","published":"2022-08-16T19:15:08.51Z","modified":"2026-06-17T04:03:04.687Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:06.906968Z"}]}}