How severe is CVE-2013-0456?

CVE-2013-0456 has a CVSS 2.0 base score of 4.0, rated medium severity.

Is CVE-2013-0456 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2013-0456?

CVE-2013-0456 primarily affects Ibm Sterling B2b Integrator. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2013-0456?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2013-0456 published?

CVE-2013-0456 was published on 2013-07-03 and last updated on 2026-06-16.

CVE-2013-0456

CVE-2013-0456 is a medium-severity vulnerability in Ibm Sterling B2b Integrator with a CVSS 2.0 base score of 4.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.0)
EPSS exploit prediction: 1% (54th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ibm Sterling B2b Integrator
Published: 2013-07-03
Last modified: 2026-06-16

Description

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path.

Frequently asked questions

What is CVE-2013-0456?: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path.
How severe is CVE-2013-0456?: CVE-2013-0456 has a CVSS 2.0 base score of 4.0, rated medium severity.
Is CVE-2013-0456 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2013-0456?: CVE-2013-0456 primarily affects Ibm Sterling B2b Integrator. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2013-0456?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2013-0456 published?: CVE-2013-0456 was published on 2013-07-03 and last updated on 2026-06-16.

References

Affected products (4)

cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*

More vulnerabilities in Ibm Sterling B2b Integrator

CVE-2021-39085 — Critical (CVSS 9.8): IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through…
CVE-2021-29903 — Critical (CVSS 9.8): IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker…
CVE-2021-29798 — Critical (CVSS 9.8): IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker…
CVE-2015-7450 — Critical (CVSS 9.8): Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and…
CVE-2012-5937 — Critical (CVSS 9.3): Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and…
CVE-2024-31903 — High (CVSS 8.8): IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on…

All CVEs affecting Ibm Sterling B2b Integrator →