CVE-2024-31903CWE-502

IBM Sterling B2B Integrator Standard Edition code execution

High · published January 22, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00968 · 61.5th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-01-22T16:08Z
EPSS history
Timeline
  • 22 JAN 16:08Z
    IBM Sterling B2B Integrator Standard Edition code execution
    cvelistv5