Sterling File Gateway
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_file_gateway:6.2.1.0:*:*:*:*:*:*:*
part: a version: 6.2.1.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling File Gateway (e06b2856-f72d-528b-8251-9955f414ba58) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36348 |
vulnerable | 2026-06-08 07:21:01.570129 |
The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
MEDIUM (4.9)
IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1 may expose sensitive information to a remote privileged attacker due to the application returning detailed technical error messages in the browser.
Published: 2026-02-17T21:31:30.418Z
Updated: 2026-02-18T20:37:54.678Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36135 |
vulnerable | 2026-06-08 07:21:01.217472 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-07T18:26:57.845Z
Updated: 2025-11-07T18:47:27.813Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36002 |
vulnerable | 2026-06-08 07:21:00.272981 |
IBM Sterling B2B Integrator information disclosure
MEDIUM (5.5)
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.
Published: 2025-10-16T14:54:53.914Z
Updated: 2025-10-25T02:02:53.477Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33008 |
vulnerable | 2026-06-08 07:19:01.302080 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.2.1.0 and IBM Sterling File Gateway 6.2.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-08-19T19:03:36.978Z
Updated: 2025-08-19T19:48:02.651Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2988 |
vulnerable | 2026-06-08 07:16:58.787349 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (2.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.
Published: 2025-08-19T19:15:58.525Z
Updated: 2025-08-19T19:35:55.065Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.