SF
Product
Sterling File Gateway
On CISA KEVExploited in the wild
206
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 134Low 3
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7450 In wildKEV | 9.8 | Jan 2 | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Affected: 5.2 |
| CVE-2023-50316 | 9.8 | Jan 28 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 is vulnerable to SQL injection Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.1 |
| CVE-2022-22338 | 9.8 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.1.2; 6.1.2.0 |
| CVE-2021-39085 | 9.8 | Aug 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.0.5; 6.1.1.0 before 6.1.1.2 |
| CVE-2021-29903 | 9.8 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection Affected: 5.2.6.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2021-29798 | 9.8 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection Affected: 6.0.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2023-38739 | 8.8 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2024-31903 | 8.8 | Jan 22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system,… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.2 |
| CVE-2022-35638 | 8.8 | Nov 22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow an attacker to… Affected: 6.0.0.0 before 6.0.3.9; 6.1.0.0 before 6.1.2.3 |
| CVE-2022-40231 | 8.8 | Feb 17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper… Affected: 6.0.0.0 through 6.0.3.7; 6.1.0.0 through 6.1.2.0 |
| CVE-2022-40232 | 8.8 | Feb 17 | IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to… Affected: 6.1.0.0 through 6.1.1.1; 6.1.2.0 |
| CVE-2022-43920 | 8.8 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control… Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.1.3; 6.1.2.0 |
| CVE-2020-4668 | 8.8 | Apr 8 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an… Affected: 6.0.0.0 through 6.0.3.5; 6.1.0.0 through 6.1.0.3; 6.1.1.0 |
| CVE-2021-29837 | 8.8 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: 5.2.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2020-4762 | 8.8 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due… Affected: 5.2.0.0 through 5.2.6.5_2; 6.0.0.0 through 6.0.3.2; 6.1.0.0 |
| CVE-2019-4728 | 8.8 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system,… Affected: 5.2.0.0 through 5.2.6.5_2; 6.0.0.0 through 6.0.3.2; 6.1.0.0 |
| CVE-2020-4700 | 8.8 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4655 | 8.8 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2019-4680 | 8.8 | Oct 20 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection Affected: 5.2.0.0 through 6.0.2.2 |
| CVE-2019-4387 | 8.8 | Nov 26 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection Affected: 6.0.0.0 through 6.0.2.0 |
| CVE-2017-1174 | 8.8 | Aug 10 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection Affected: 5.2 |
| CVE-2017-1347 | 8.8 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection Affected: 5.2 |
| CVE-2017-1192 | 8.2 | Aug 10 | IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 5.2 |
| CVE-2026-7769 | 8.1 | Jul 28 | SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2014-0927 | 8.1 | Apr 20 | The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to bypass authentication by leveraging… Affected: 5.1; 5.2 |
| CVE-2025-14031 | 7.5 | Mar 17 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2025-36134 | 7.5 | Nov 25 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or… Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5_1; 6.2.1.1 |
| CVE-2021-20584 | 7.5 | Oct 7 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls Affected: 2.2.0.0 through 5.2.6.5_4; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.2 |
| CVE-2021-38925 | 7.5 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0 Affected: 5.2.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2020-4937 | 7.5 | Nov 20 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… Affected: 5.2.0.0 through 6.0.3.2 |
| CVE-2018-1720 | 7.5 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… Affected: 5.2.0.1; 5.2.6.3_6; 6.0.0.0; 6.0.0.1 |
| CVE-2015-7410 | 7.4 | Jan 1 | The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain… Affected: 5.2 |
| CVE-2025-36368 | 7.2 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1 |
| CVE-2019-4043 | 7.1 | Apr 2 | IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 5.2 through 5.2.6.4; 6.0.0.0 |
| CVE-2018-1564 | 6.7 | Jul 20 | IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2026-7362 | 6.5 | Jul 28 | Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2026-1264 | 6.5 | Mar 17 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2025-14483 | 6.5 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2025-2988 | 6.5 | Aug 19 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an… Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5; 6.2.1.0 |
| CVE-2023-32341 | 6.5 | Feb 9 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 could allow an authenticated user to cause a denial of service due to uncontrolled resource… Affected: 6.0.0.0 through 6.0.3.8; 6.1.0.0 through 6.1.2.3 |
| CVE-2023-22876 | 6.5 | Mar 15 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in… Affected: 6.0.0.0 before 6.0.3.8; 6.1.0.0 before 6.1.2.2 |
| CVE-2022-22371 | 6.5 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate… Affected: 6.0.0.0 through 6.0.3.6; 6.1.0.0 through 6.1.0.5; 6.1.1.0 through 6.1.1.1; 6.1.2.0 |
| CVE-2022-22337 | 6.5 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.2.1; 6.1.2.0 |
| CVE-2021-39087 | 6.5 | Aug 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive… Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.0.5; 6.1.1.0 before 6.1.1.2 |
| CVE-2022-22482 | 6.5 | May 17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the… Affected: 6.0.0.0 through 6.0.3.5; 6.1.0.0 through 6.1.1.0 |
| CVE-2021-39033 | 6.5 | Apr 19 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed… Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.1.1 |
| CVE-2021-20375 | 6.5 | Oct 7 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.1 |
| CVE-2019-4738 | 6.5 | Dec 10 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.1 |
| CVE-2020-4692 | 6.5 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4671 | 6.5 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |