Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

102 records

Vendor: IBM Component: Sterling File Gateway Clear all filters
TI-2025-24784 CVE-2025-36298 · GHSA-j82r-4qc9-cx6c

Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

Priority LOW 24

IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00231 Published 2026-07-30 No fix listed CWE-79
TI-2026-01583 CVE-2026-1918 · GHSA-j2v9-7h56-wj5f

IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file

Priority LOW 23

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00398 Published 2026-07-28 No fix listed CWE-532
TI-2026-02727 CVE-2026-3157 · GHSA-pcjc-2762-7xwq

Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due…

Priority LOW 20

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00301 Published 2026-07-28 No fix listed CWE-615
TI-2026-02728 CVE-2026-3158 · GHSA-87wx-qw35-2g7w

Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure

Priority LOW 20

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00301 Published 2026-07-28 No fix listed CWE-615
TI-2026-06468 CVE-2026-7362 · GHSA-wh6h-m7wr-5mp7

Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway

Priority LOW 29

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an authenticated user to obtain sens…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00302 Published 2026-07-28 No fix listed CWE-284
TI-2026-06843 CVE-2026-7769 · GHSA-pqr9-rr9q-29vr

SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway

Priority LOW 38

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0048 Published 2026-07-28 No fix listed CWE-89
TI-2026-06847 CVE-2026-7775 · GHSA-hccv-7f3m-ww5h

Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway

Priority LOW 24

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00242 Published 2026-07-28 No fix listed CWE-79
TI-2026-03001 CVE-2026-3482 · GHSA-qp9j-9ffq-4c7v

IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass

Priority LOW 30

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00459 Published 2026-07-22 No fix listed CWE-639
TI-2026-00982 CVE-2026-1264 · GHSA-jcvq-626f-f479

IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls

Priority LOW 30

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partn…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00186 Published 2026-03-17 No fix listed CWE-306
TI-2025-12821 CVE-2025-14031 · GHSA-98f5-7jq3-jhgq

IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service

Priority LOW 39

IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticated attacker to send a specially craft…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00357 Published 2026-03-17 No fix listed CWE-77
TI-2025-24813 CVE-2025-36368 · GHSA-vgc8-64p2-x3p6

IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection

Priority LOW 34

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, and 6.2.1.0 through 6.2.1.1_1 are vulnerable to SQL injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00364 Published 2026-03-13 No fix listed CWE-89
TI-2023-21482 CVE-2023-40693 · GHSA-vvcq-jgcq-wmgr

IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting

Priority LOW 24

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, and 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1 are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-79
TI-2025-13226 CVE-2025-14483 · GHSA-c8pg-q8xp-6p6p

IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure

Priority LOW 29

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could disclose sensitive host information to authenticated users in r…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0028 Published 2026-03-13 No fix listed CWE-201
TI-2025-13247 CVE-2025-14504 · GHSA-xh4v-97g8-ww62

IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting

Priority LOW 24

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00242 Published 2026-03-13 No fix listed CWE-79
TI-2026-00616 CVE-2026-0835 · GHSA-c87w-f922-g7m8

Cross-site scripting in IBM Sterling B2B Integrator

Priority LOW 24

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00242 Published 2026-03-13 No fix listed CWE-79
TI-2025-24797 CVE-2025-36348 · GHSA-86fw-gqvv-g24p

The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure

Priority LOW 22

IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00346 Published 2026-02-17 No fix listed CWE-209
TI-2025-24715 CVE-2025-36134 · GHSA-xmfq-xm97-g58p

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

Priority LOW 33

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensiti…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00319 Published 2025-11-25 No fix listed CWE-1275
TI-2025-24696 CVE-2025-36112 · GHSA-cvjp-mxwp-pm9w

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

Priority LOW 30

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00251 Published 2025-11-24 No fix listed CWE-497
TI-2025-24716 CVE-2025-36135 · GHSA-whqj-vxh6-h4wx

IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting

Priority LOW 24

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 is vulnerable to cross-site script…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00177 Published 2025-11-07 No fix listed CWE-79
TI-2025-24624 CVE-2025-36002 · GHSA-mvvr-m63m-hj6g

IBM Sterling B2B Integrator information disclosure

Priority LOW 24

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00153 Published 2025-10-16 No fix listed CWE-260
TI-2025-02332 CVE-2025-2667 · GHSA-82m4-9xx8-m8wp

IBM Sterling B2B Integrator information disclosure

Priority LOW 22

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 could disclose sensitive system information about the…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0026 Published 2025-09-04 No fix listed CWE-497
TI-2025-02357 CVE-2025-2694 · GHSA-82h7-f423-g8cp

IBM Sterling B2B Integrator cross-site scripting

Priority LOW 21

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00186 Published 2025-09-04 No fix listed CWE-79
TI-2025-02603 CVE-2025-2988 · GHSA-48wm-29g7-w3qw

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

Priority LOW 28

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attack…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00252 Published 2025-08-19 No fix listed CWE-497
Load more