Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_connectexpress_adapter_for_sterling_b2b_integrator_520:5.2.0.00:*:*:*:*:*:*:*

part: a version: 5.2.0.00 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling Connectexpress Adapter For Sterling B2B Integrator 520 (14e1d676-d125-5ed3-8244-f84866e3706b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36115 vulnerable 2026-06-08 07:21:01.017615 Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
MEDIUM (6.3)
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Published: 2026-01-20T15:18:17.680Z
Updated: 2026-01-20T15:51:47.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36113 vulnerable 2026-06-08 07:21:01.011974 Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
MEDIUM (5.4)
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-01-20T15:15:55.890Z
Updated: 2026-01-20T15:34:16.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36066 vulnerable 2026-06-08 07:21:00.823500 Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
MEDIUM (6.1)
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-01-20T15:14:03.557Z
Updated: 2026-01-20T15:36:00.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36065 vulnerable 2026-06-08 07:21:00.823048 Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
MEDIUM (6.3)
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.
Published: 2026-01-20T15:12:47.078Z
Updated: 2026-01-20T15:38:07.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36063 vulnerable 2026-06-08 07:21:00.818483 Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
MEDIUM (6.3)
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Published: 2026-01-20T15:10:57.747Z
Updated: 2026-01-20T15:39:45.384Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.