CVE-2013-5406: Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Ga...

Security readout for executives and security teams

CVE-2013-5406 is an authenticated cross-site scripting issue in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2. A logged-in remote user could inject script or HTML through unspecified parameters, with a noted Windows MHTML protocol-handler interaction. Public data here does not provide CVSS, a named patch level, or active exploitation evidence. Exposure is most likely where legacy IBM Sterling B2B Integrator 5.2 or Sterling File Gateway 2.2 portals remain accessible to users, partners, or administrators. Risk is lower for decommissioned, upgraded, or tightly access-controlled deployments. The source bundle does not confirm later affected versions. Treat this as a legacy-platform exposure check, not an emergency based on current public evidence. If affected Sterling systems are still in use, prioritize vendor-guided remediation because these platforms often support sensitive B2B file exchange workflows. Mitigation focus: Check IBM support advisory swg21657539 for applicable remediation guidance.; Check IBM APAR IC96055 for vendor-specific fix or upgrade direction.; Identify and retire any remaining Sterling B2B Integrator 5.2 deployments..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.