Sterling B2B Integrator
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.0.4:*:*:*:*:*:*:*
part: a version: 6.2.0.4 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3630 |
vulnerable | 2026-06-08 07:23:09.545171 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (6.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway
6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4
is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-07-08T14:51:24.983Z
Updated: 2025-08-24T11:31:14.738Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36134 |
vulnerable | 2026-06-08 07:21:01.210240 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (3.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
Published: 2025-11-25T14:40:55.959Z
Updated: 2025-11-25T14:49:21.608Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33014 |
vulnerable | 2026-06-08 07:19:01.376783 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection
MEDIUM (5.4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.
Published: 2025-07-18T18:51:05.486Z
Updated: 2025-08-18T01:33:59.946Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2988 |
vulnerable | 2026-06-08 07:16:58.783005 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (2.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.
Published: 2025-08-19T19:15:58.525Z
Updated: 2025-08-19T19:35:55.065Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2793 |
vulnerable | 2026-06-08 07:16:58.332853 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway
6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4
is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-07-08T14:59:15.632Z
Updated: 2025-08-24T11:22:24.854Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2694 |
vulnerable | 2026-06-08 07:16:58.080126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2667 |
vulnerable | 2026-06-08 07:16:58.014190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.