Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_file_gateway:6.2.0.0:*:*:*:*:*:*:*

part: a version: 6.2.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling File Gateway (e06b2856-f72d-528b-8251-9955f414ba58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3630 vulnerable 2026-06-08 07:23:09.548012 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (6.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-07-08T14:51:24.983Z
Updated: 2025-08-24T11:31:14.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36348 vulnerable 2026-06-08 07:21:01.569899 The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
MEDIUM (4.9)
IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1 may expose sensitive information to a remote privileged attacker due to the application returning detailed technical error messages in the browser.
Published: 2026-02-17T21:31:30.418Z
Updated: 2026-02-18T20:37:54.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36135 vulnerable 2026-06-08 07:21:01.217140 IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-07T18:26:57.845Z
Updated: 2025-11-07T18:47:27.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36134 vulnerable 2026-06-08 07:21:01.210587 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (3.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
Published: 2025-11-25T14:40:55.959Z
Updated: 2025-11-25T14:49:21.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36112 vulnerable 2026-06-08 07:21:01.009476 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
MEDIUM (5.3)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user.
Published: 2025-11-24T18:25:03.423Z
Updated: 2025-11-24T18:58:40.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36002 vulnerable 2026-06-08 07:21:00.270771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33014 vulnerable 2026-06-08 07:19:01.380206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2988 vulnerable 2026-06-08 07:16:58.785912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2827 vulnerable 2026-06-08 07:16:58.439546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2793 vulnerable 2026-06-08 07:16:58.334433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2694 vulnerable 2026-06-08 07:16:58.080384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2667 vulnerable 2026-06-08 07:16:58.018798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47109 vulnerable 2026-06-08 06:48:11.407927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22316 vulnerable 2026-06-08 06:29:34.514456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52292 vulnerable 2026-06-08 06:17:54.784514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47714 vulnerable 2026-06-08 06:14:25.451259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47159 vulnerable 2026-06-08 06:14:24.110443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.