Sterling B2B Integrator
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.1.0:*:*:*:*:*:*:*
part: a version: 6.2.1.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1264 |
vulnerable | 2026-06-08 07:49:08.058693 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls
HIGH (7.1)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partners of a community and to delete the communities.
Published: 2026-03-17T22:41:42.874Z
Updated: 2026-03-18T20:15:57.388Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36368 |
vulnerable | 2026-06-08 07:21:01.652689 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection
MEDIUM (6.5)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, and 6.2.1.0 through 6.2.1.1_1 are vulnerable to SQL injection. An administrative user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Published: 2026-03-13T19:35:46.030Z
Updated: 2026-03-16T13:36:43.574Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36348 |
vulnerable | 2026-06-08 07:21:01.566448 |
The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
MEDIUM (4.9)
IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1 may expose sensitive information to a remote privileged attacker due to the application returning detailed technical error messages in the browser.
Published: 2026-02-17T21:31:30.418Z
Updated: 2026-02-18T20:37:54.678Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36135 |
vulnerable | 2026-06-08 07:21:01.217316 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-07T18:26:57.845Z
Updated: 2025-11-07T18:47:27.813Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36002 |
vulnerable | 2026-06-08 07:21:00.268161 |
IBM Sterling B2B Integrator information disclosure
MEDIUM (5.5)
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.
Published: 2025-10-16T14:54:53.914Z
Updated: 2025-10-25T02:02:53.477Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33008 |
vulnerable | 2026-06-08 07:19:01.301466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2988 |
vulnerable | 2026-06-08 07:16:58.784558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14504 |
vulnerable | 2026-06-08 07:06:34.572872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14483 |
vulnerable | 2026-06-08 07:06:34.546731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14031 |
vulnerable | 2026-06-08 07:06:33.426235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40693 |
vulnerable | 2026-06-08 06:11:04.312163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.