Sterling B2B Integrator
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_b2b_integrator:6.1.2.6:*:*:*:standard:*:*:*
part: a version: 6.1.2.6 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc) |
| Edition | * |
| Language | * |
| Software edition | standard |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-1349 |
vulnerable | 2026-06-08 07:08:36.592880 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (5.5)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4
is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-06-18T16:20:51.025Z
Updated: 2025-08-24T11:50:52.809Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1348 |
vulnerable | 2026-06-08 07:08:36.584664 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
MEDIUM (4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a suitable caching policy.
Published: 2025-06-18T16:19:48.515Z
Updated: 2025-08-24T11:50:32.968Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56338 |
vulnerable | 2026-06-08 06:54:17.735889 |
IBM Sterling B2B Integrator cross-site scripting
MEDIUM (4.8)
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-03-11T16:27:38.456Z
Updated: 2025-09-01T01:06:48.820Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54183 |
vulnerable | 2026-06-08 06:54:16.160752 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-06-18T15:08:50.493Z
Updated: 2025-08-24T11:47:06.405Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54172 |
vulnerable | 2026-06-08 06:54:16.134116 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site request forgery
MEDIUM (4.3)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Published: 2025-06-18T16:13:10.754Z
Updated: 2025-08-24T11:46:45.622Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52905 |
vulnerable | 2026-06-08 06:52:16.392375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.