Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_file_gateway:6.2.0.5:*:*:*:*:*:*:*

part: a version: 6.2.0.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling File Gateway (e06b2856-f72d-528b-8251-9955f414ba58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36348 vulnerable 2026-06-08 07:21:01.570007 The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
MEDIUM (4.9)
IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1 may expose sensitive information to a remote privileged attacker due to the application returning detailed technical error messages in the browser.
Published: 2026-02-17T21:31:30.418Z
Updated: 2026-02-18T20:37:54.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36135 vulnerable 2026-06-08 07:21:01.217178 IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-07T18:26:57.845Z
Updated: 2025-11-07T18:47:27.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36112 vulnerable 2026-06-08 07:21:01.009506 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
MEDIUM (5.3)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user.
Published: 2025-11-24T18:25:03.423Z
Updated: 2025-11-24T18:58:40.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36002 vulnerable 2026-06-08 07:21:00.271962 IBM Sterling B2B Integrator information disclosure
MEDIUM (5.5)
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.
Published: 2025-10-16T14:54:53.914Z
Updated: 2025-10-25T02:02:53.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.