Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.0.0:*:*:*:*:*:*:*

part: a version: 6.2.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1264 vulnerable 2026-06-08 07:49:08.054060 IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls
HIGH (7.1)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partners of a community and to delete the communities.
Published: 2026-03-17T22:41:42.874Z
Updated: 2026-03-18T20:15:57.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3630 vulnerable 2026-06-08 07:23:09.544316 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (6.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-07-08T14:51:24.983Z
Updated: 2025-08-24T11:31:14.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36368 vulnerable 2026-06-08 07:21:01.642305 IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection
MEDIUM (6.5)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, and 6.2.1.0 through 6.2.1.1_1 are vulnerable to SQL injection. An administrative user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Published: 2026-03-13T19:35:46.030Z
Updated: 2026-03-16T13:36:43.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36348 vulnerable 2026-06-08 07:21:01.566283 The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
MEDIUM (4.9)
IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1 may expose sensitive information to a remote privileged attacker due to the application returning detailed technical error messages in the browser.
Published: 2026-02-17T21:31:30.418Z
Updated: 2026-02-18T20:37:54.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36135 vulnerable 2026-06-08 07:21:01.215269 IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-07T18:26:57.845Z
Updated: 2025-11-07T18:47:27.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36134 vulnerable 2026-06-08 07:21:01.208330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36112 vulnerable 2026-06-08 07:21:01.005325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36002 vulnerable 2026-06-08 07:21:00.266458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33014 vulnerable 2026-06-08 07:19:01.375953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2988 vulnerable 2026-06-08 07:16:58.782868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2793 vulnerable 2026-06-08 07:16:58.332735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2694 vulnerable 2026-06-08 07:16:58.079991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2667 vulnerable 2026-06-08 07:16:58.013486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14504 vulnerable 2026-06-08 07:06:34.572727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14483 vulnerable 2026-06-08 07:06:34.546685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14031 vulnerable 2026-06-08 07:06:33.424389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22357 vulnerable 2026-06-08 06:29:34.649779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50309 vulnerable 2026-06-08 06:16:15.922824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50307 vulnerable 2026-06-08 06:16:15.914626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45186 vulnerable 2026-06-08 06:12:42.139839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40693 vulnerable 2026-06-08 06:11:04.310415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32340 vulnerable 2026-06-08 06:04:45.580007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.