SF
Product
Sterling File Gateway
On CISA KEVExploited in the wild
206
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 134Low 3
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4566 | 6.5 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by… Affected: 5.2.6.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4475 | 6.5 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2015-0194 | 6.5 | Aug 2 | XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a… Affected: 5.1; 5.2 |
| CVE-2017-1193 | 6.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request Affected: 5.2 |
| CVE-2017-1131 | 6.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands Affected: 5.2 |
| CVE-2016-9982 | 6.5 | Jun 22 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control Affected: 5.2 |
| CVE-2024-31914 | 6.4 | Jan 6 | IBM Sterling B2B Integrator cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.2 |
| CVE-2019-4598 | 6.3 | Feb 26 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection Affected: 5.2.0.0 through 5.2.6.5 |
| CVE-2019-4597 | 6.3 | Feb 26 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection Affected: 5.2.0.0 through 5.2.6.5 |
| CVE-2025-33014 | 6.1 | Jul 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site Affected: 6.0.0.0 before 6.1.2.7_1; 6.2 before 6.2.0.5 |
| CVE-2022-34330 | 6.1 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.6; 6.1.0.0 through 6.1.0.5; 6.1.1.0 through 6.1.1.2; 6.1.2.0 |
| CVE-2021-20561 | 6.1 | Oct 7 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting Affected: 2.2.0.0 through 5.2.6.5_4; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.2 |
| CVE-2020-4657 | 6.1 | Dec 16 | IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting Affected: 5.2.0.0 through 6.0.3.2 |
| CVE-2019-4595 | 6.1 | Feb 24 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 5.2.0.0 through 5.2.6.5 |
| CVE-2016-6020 | 6.1 | Feb 1 | IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 5.2; 5.2.1; 5.2.2; 5.2.4; 5.2.4.1; 5.2.4.2; +2 more |
| CVE-2016-3057 | 6.1 | Nov 30 | Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote attackers to inject arbitrary web script or… Affected: 5.2 |
| CVE-2015-7431 | 6.1 | Jan 2 | Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL Affected: 5.2 |
| CVE-2026-7253 | 6.0 | Jun 22 | IBM Sterling File Gateway SQL Injection Affected: 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2019-4063 | 5.9 | Mar 5 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text Affected: 5.2.0.1; 6.0.0.0 |
| CVE-2025-36002 | 5.5 | Oct 16 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files… Affected: 6.2.0.0 before 6.2.0.5_1; 6.2.1.0 |
| CVE-2023-25682 | 5.5 | Nov 22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that could be read by a… Affected: 6.0.0.0 before 6.0.3.9; 6.1.0.0 before 6.1.2.3 |
| CVE-2017-1349 | 5.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local user Affected: 5.2 |
| CVE-2017-1302 | 5.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls Affected: 5.2 |
| CVE-2016-5893 | 5.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system Affected: 5.2 |
| CVE-2015-7437 | 5.5 | Jan 2 | Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors Affected: 5.2 |
| CVE-2026-19273 | 5.4 | Sep 14 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control Affected: 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 |
| CVE-2025-36431 | 5.4 | Jul 30 | XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-36298 | 5.4 | Jul 30 | Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.1.2.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2023-40693 | 5.4 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1 |
| CVE-2025-14504 | 5.4 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2026-0835 | 5.4 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to cross-site… Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2025-36135 | 5.4 | Nov 7 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and… Affected: 6.0.0.0 through 6.1.2.7_1; 6.2.0.0 through 6.2.0.5; 6.2.1.0 |
| CVE-2025-33008 | 5.4 | Aug 19 | IBM Sterling B2B Integrator 6.2.1.0 and IBM Sterling File Gateway 6.2.1.0 is vulnerable to cross-site scripting Affected: 6.2.1.0 |
| CVE-2025-3630 | 5.4 | Jul 8 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to… Affected: 6.0.0.0 before 6.1.2.7_1; 6.2 before 6.2.0.5 |
| CVE-2025-2793 | 5.4 | Jul 8 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to… Affected: 6.0.0.0 before 6.1.2.7_1; 6.2 before 6.2.0.5 |
| CVE-2024-54183 | 5.4 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting Affected: 6.0.0.0 before 6.1.2.7; 6.2 before 6.2.0.5 |
| CVE-2024-49807 | 5.4 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2024-47116 | 5.4 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2024-47103 | 5.4 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2024-40696 | 5.4 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2023-50309 | 5.4 | Jan 23 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to stored cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 |
| CVE-2023-32340 | 5.4 | Jan 23 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 |
| CVE-2024-31913 | 5.4 | Jan 6 | IBM Sterling B2B Integrator cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.2 |
| CVE-2021-20553 | 5.4 | Dec 18 | IBM Sterling B2B Integrator Standard Edition cross-site scripting Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.2 |
| CVE-2023-42014 | 5.4 | Jun 27 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.2.0.2 |
| CVE-2023-42011 | 5.4 | Jun 27 | IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which… Affected: 6.1; 6.2 |
| CVE-2024-22357 | 5.4 | Apr 12 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.9; 6.1.0.0 through 6.1.2.3; 6.2.0.0 |
| CVE-2023-50307 | 5.4 | Apr 12 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.9; 6.1.0.0 through 6.1.2.3; 6.2.0.0 |
| CVE-2023-45186 | 5.4 | Apr 12 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.9; 6.1.0.0 through 6.1.2.3; 6.2.0.0 |
| CVE-2022-43578 | 5.4 | Feb 22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.7; 6.1.0.0 through 6.1.2.0 |