CVE-2018-1513

IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141551.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=ibm10717031Vendor Advisory
• http://www.securityfocus.com/bid/104910Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/141551Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45190/Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=ibm10717031Vendor Advisory
• http://www.securityfocus.com/bid/104910Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/141551Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45190/Third Party Advisory, VDB Entry

Published

Jul 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15124Weak hashing algorithm in Zipato Zipabox Smart Home Controll…
• CVE-2018-15125Sensitive Information Disclosure in Zipato Zipabox Smart Hom…
• CVE-2018-15126LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7…
• CVE-2018-15127LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495d…
• CVE-2018-15128An issue was discovered in Polycom Group Series 6.1.6.1 and …
• CVE-2018-15129ThinkSAAS through 2018-07-25 has XSS via the index.php?app=a…
• CVE-2018-15130ThinkSAAS through 2018-07-25 has XSS via the index.php?app=g…
• CVE-2018-15131An issue was discovered in Synacor Zimbra Collaboration Suit…
• CVE-2018-15132An issue was discovered in ext/standard/link_win32.c in PHP …
• CVE-2018-15133In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29…8.1
• CVE-2018-15136TitanHQ SpamTitan before 7.01 has Improper input validation.…
• CVE-2018-15137CeLa Link CLR-M20 devices allow unauthorized users to upload…