IBM Sterling File Gateway 6.0.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sterling_file_gateway:6.0.0.0:*:*:*:*:*:*:*
part: a version: 6.0.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sterling File Gateway (e06b2856-f72d-528b-8251-9955f414ba58) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3630 |
vulnerable | 2026-06-08 07:23:09.546119 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
MEDIUM (6.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway
6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4
is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-07-08T14:51:24.983Z
Updated: 2025-08-24T11:31:14.738Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36135 |
vulnerable | 2026-06-08 07:21:01.215527 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
MEDIUM (5.4)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-07T18:26:57.845Z
Updated: 2025-11-07T18:47:27.813Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36134 |
vulnerable | 2026-06-08 07:21:01.210372 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
LOW (3.7)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
Published: 2025-11-25T14:40:55.959Z
Updated: 2025-11-25T14:49:21.608Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36112 |
vulnerable | 2026-06-08 07:21:01.008375 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
MEDIUM (5.3)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user.
Published: 2025-11-24T18:25:03.423Z
Updated: 2025-11-24T18:58:40.859Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33014 |
vulnerable | 2026-06-08 07:19:01.378001 |
IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection
MEDIUM (5.4)
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.
Published: 2025-07-18T18:51:05.486Z
Updated: 2025-08-18T01:33:59.946Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2988 |
vulnerable | 2026-06-08 07:16:58.784689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2827 |
vulnerable | 2026-06-08 07:16:58.439282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2793 |
vulnerable | 2026-06-08 07:16:58.332879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2694 |
vulnerable | 2026-06-08 07:16:58.080243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2667 |
vulnerable | 2026-06-08 07:16:58.015402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47109 |
vulnerable | 2026-06-08 06:48:11.405733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22316 |
vulnerable | 2026-06-08 06:29:34.511623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52292 |
vulnerable | 2026-06-08 06:17:54.781869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47159 |
vulnerable | 2026-06-08 06:14:24.100886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.