Sterling B2B Integrator
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_b2b_integrator:6.1.2.7_2:*:*:*:*:*:*:*
part: a version: 6.1.2.7_2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1264 |
vulnerable | 2026-06-08 07:49:08.052286 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls
HIGH (7.1)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partners of a community and to delete the communities.
Published: 2026-03-17T22:41:42.874Z
Updated: 2026-03-18T20:15:57.388Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36368 |
vulnerable | 2026-06-08 07:21:01.642182 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection
MEDIUM (6.5)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, and 6.2.1.0 through 6.2.1.1_1 are vulnerable to SQL injection. An administrative user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Published: 2026-03-13T19:35:46.030Z
Updated: 2026-03-16T13:36:43.574Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36348 |
vulnerable | 2026-06-08 07:21:01.566232 |
The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
MEDIUM (4.9)
IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1 may expose sensitive information to a remote privileged attacker due to the application returning detailed technical error messages in the browser.
Published: 2026-02-17T21:31:30.418Z
Updated: 2026-02-18T20:37:54.678Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14504 |
vulnerable | 2026-06-08 07:06:34.572697 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-03-13T19:08:37.702Z
Updated: 2026-03-13T19:37:07.983Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14483 |
vulnerable | 2026-06-08 07:06:34.546646 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure
MEDIUM (4.3)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could disclose sensitive host information to authenticated users in responses that could be used in further attacks against the system.
Published: 2026-03-13T19:15:11.844Z
Updated: 2026-03-13T19:37:32.919Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14031 |
vulnerable | 2026-06-08 07:06:33.422774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40693 |
vulnerable | 2026-06-08 06:11:04.308683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.