Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_file_gateway:6.1.2.5:*:*:*:*:*:*:*

part: a version: 6.1.2.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling File Gateway (e06b2856-f72d-528b-8251-9955f414ba58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22316 vulnerable 2026-06-08 06:29:34.513014 IBM Sterling File Gateway improper access control
MEDIUM (4.3)
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls.
Published: 2025-01-27T16:03:52.880Z
Updated: 2025-09-29T14:59:55.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52292 vulnerable 2026-06-08 06:17:54.783000 IBM Sterling File Gateway cross-site scripting
MEDIUM (6.4)
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-27T16:06:50.729Z
Updated: 2025-01-27T17:57:29.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47159 vulnerable 2026-06-08 06:14:24.102042 IBM Sterling File Gateway information disclosure
MEDIUM (4.3)
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses.
Published: 2025-01-27T16:04:51.207Z
Updated: 2025-01-27T17:57:38.806Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.