Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_file_gateway:6.1.2.6:*:*:*:*:*:*:*

part: a version: 6.1.2.6 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling File Gateway (e06b2856-f72d-528b-8251-9955f414ba58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3630 vulnerable 2026-06-08 07:23:09.546885 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (6.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-07-08T14:51:24.983Z
Updated: 2025-08-24T11:31:14.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2827 vulnerable 2026-06-08 07:16:58.439420 IBM Sterling File Gateway information disclosure
MEDIUM (4.3)
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory information to an authenticated user that could be used in further attacks against the system.
Published: 2025-07-08T15:01:52.545Z
Updated: 2025-08-24T11:22:04.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2793 vulnerable 2026-06-08 07:16:58.334386 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-07-08T14:59:15.632Z
Updated: 2025-08-24T11:22:24.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47109 vulnerable 2026-06-08 06:48:11.406746 IBM Sterling File Gateway information disclosure
MEDIUM (5.3)
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against the system.
Published: 2025-03-10T16:01:42.848Z
Updated: 2025-09-01T01:08:12.240Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.