VULNERABILITY INTELLIGENCE

CVE-2024-31903

CVSS score8.8 HIGH
EPSS probability1.00%
CISA KEVNot currently listed
Published2025-01-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data.

Weakness classification

  • psirt@us.ibm.com: CWE-502

Primary references