Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.1.1:*:*:*:*:*:*:*

part: a version: 6.2.1.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSterling B2B Integrator (4ec22964-08ae-53c3-a4a6-eac9eb7505dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36348 vulnerable 2026-06-08 07:21:01.566589 The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
MEDIUM (4.9)
IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1 may expose sensitive information to a remote privileged attacker due to the application returning detailed technical error messages in the browser.
Published: 2026-02-17T21:31:30.418Z
Updated: 2026-02-18T20:37:54.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36134 vulnerable 2026-06-08 07:21:01.212346 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (3.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
Published: 2025-11-25T14:40:55.959Z
Updated: 2025-11-25T14:49:21.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36112 vulnerable 2026-06-08 07:21:01.007405 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
MEDIUM (5.3)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user.
Published: 2025-11-24T18:25:03.423Z
Updated: 2025-11-24T18:58:40.859Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.