Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_file_gateway:6.1.2.7:*:*:*:*:*:*:*

part: a version: 6.1.2.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling File Gateway (e06b2856-f72d-528b-8251-9955f414ba58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36134 vulnerable 2026-06-08 07:21:01.210484 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (3.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
Published: 2025-11-25T14:40:55.959Z
Updated: 2025-11-25T14:49:21.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36112 vulnerable 2026-06-08 07:21:01.009425 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
MEDIUM (5.3)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user.
Published: 2025-11-24T18:25:03.423Z
Updated: 2025-11-24T18:58:40.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33014 vulnerable 2026-06-08 07:19:01.378902 IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection
MEDIUM (5.4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.
Published: 2025-07-18T18:51:05.486Z
Updated: 2025-08-18T01:33:59.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2988 vulnerable 2026-06-08 07:16:58.785860 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (2.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.
Published: 2025-08-19T19:15:58.525Z
Updated: 2025-08-19T19:35:55.065Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.