IBM Sterling File Gateway 6.2.0.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_file_gateway:6.2.0.4:*:*:*:*:*:*:*

part: a version: 6.2.0.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling File Gateway (e06b2856-f72d-528b-8251-9955f414ba58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3630 vulnerable 2026-06-08 07:23:09.548854 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (6.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-07-08T14:51:24.983Z
Updated: 2025-08-24T11:31:14.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36134 vulnerable 2026-06-08 07:21:01.212156 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (3.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
Published: 2025-11-25T14:40:55.959Z
Updated: 2025-11-25T14:49:21.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33014 vulnerable 2026-06-08 07:19:01.380916 IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection
MEDIUM (5.4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.
Published: 2025-07-18T18:51:05.486Z
Updated: 2025-08-18T01:33:59.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2988 vulnerable 2026-06-08 07:16:58.786051 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (2.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.
Published: 2025-08-19T19:15:58.525Z
Updated: 2025-08-19T19:35:55.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2827 vulnerable 2026-06-08 07:16:58.439655 IBM Sterling File Gateway information disclosure
MEDIUM (4.3)
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory information to an authenticated user that could be used in further attacks against the system.
Published: 2025-07-08T15:01:52.545Z
Updated: 2025-08-24T11:22:04.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2793 vulnerable 2026-06-08 07:16:58.334572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2694 vulnerable 2026-06-08 07:16:58.080407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2667 vulnerable 2026-06-08 07:16:58.019519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.