SF
Product
Sterling File Gateway
On CISA KEVExploited in the wild
206
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 134Low 3
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2793 | 5.4 | Jul 8 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to… Affected: 6.0.0.0 before 6.1.2.7_1; 6.2 before 6.2.0.5 |
| CVE-2024-54183 | 5.4 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting Affected: 6.0.0.0 before 6.1.2.7; 6.2 before 6.2.0.5 |
| CVE-2024-49807 | 5.4 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2024-47116 | 5.4 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2024-47103 | 5.4 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2024-40696 | 5.4 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2023-50309 | 5.4 | Jan 23 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to stored cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 |
| CVE-2023-32340 | 5.4 | Jan 23 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 |
| CVE-2024-31913 | 5.4 | Jan 6 | IBM Sterling B2B Integrator cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.2 |
| CVE-2021-20553 | 5.4 | Dec 18 | IBM Sterling B2B Integrator Standard Edition cross-site scripting Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.2 |
| CVE-2023-42014 | 5.4 | Jun 27 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.2.0.2 |
| CVE-2023-42011 | 5.4 | Jun 27 | IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which… Affected: 6.1; 6.2 |
| CVE-2024-22357 | 5.4 | Apr 12 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.9; 6.1.0.0 through 6.1.2.3; 6.2.0.0 |
| CVE-2023-50307 | 5.4 | Apr 12 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.9; 6.1.0.0 through 6.1.2.3; 6.2.0.0 |
| CVE-2023-45186 | 5.4 | Apr 12 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.9; 6.1.0.0 through 6.1.2.3; 6.2.0.0 |
| CVE-2022-43578 | 5.4 | Feb 22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.7; 6.1.0.0 through 6.1.2.0 |
| CVE-2022-43579 | 5.4 | Feb 17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.7; 6.1.0.0 through 6.1.2.0 |
| CVE-2022-22352 | 5.4 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.1.2; 6.1.2.0 |
| CVE-2021-38928 | 5.4 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and… Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.1.2; 6.1.2.0 |
| CVE-2021-39035 | 5.4 | Aug 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.0.5; 6.1.1.0 before 6.1.1.2 |
| CVE-2021-20571 | 5.4 | Oct 7 | IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting Affected: 5.2.0.0 through 5.2.6.5_4; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2021-29855 | 5.4 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting Affected: 5.2.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2021-29836 | 5.4 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 Affected: 5.2.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2021-29764 | 5.4 | Oct 6 | IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting Affected: 5.2.0.0 through 6.1.0.3 |
| CVE-2021-20562 | 5.4 | Jul 27 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting Affected: 5.2.0.0 through 5.2.6.5_3; 6.1.0.0 through 6.1.0.2 |
| CVE-2020-4564 | 5.4 | Oct 20 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting Affected: 5.2.0.0 through 6.0.3.1 |
| CVE-2019-4596 | 5.4 | Feb 26 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting Affected: 5.2.0.0 through 5.2.6.5 |
| CVE-2019-4258 | 5.4 | May 1 | IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4148 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4077 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4076 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4075 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4074 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4073 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4029 | 5.4 | Mar 5 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting Affected: 5.2.0.1; 6.0.0.0 |
| CVE-2019-4027 | 5.4 | Mar 5 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting Affected: 5.2.0.1; 6.0.0.0 |
| CVE-2019-4028 | 5.4 | Mar 5 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting Affected: 5.2.0.1; 6.0.0.0 |
| CVE-2018-1718 | 5.4 | Jul 31 | IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2018-1513 | 5.4 | Jul 23 | IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting Affected: after 5.2 through 5.2.6 |
| CVE-2018-1563 | 5.4 | Jul 20 | IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2017-1482 | 5.4 | Dec 7 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting Affected: 5.2 |
| CVE-2017-1496 | 5.4 | Jul 31 | IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting Affected: 5.2; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +1 more |
| CVE-2017-1348 | 5.4 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting Affected: 5.2 |
| CVE-2017-1132 | 5.4 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting Affected: 5.2 |
| CVE-2026-3482 | 5.3 | Jul 22 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-36112 | 5.3 | Nov 24 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure Affected: 6.0.0.0 through 6.1.2.7; 6.2.0.0 through 6.2.0.5; 6.2.1.1 |
| CVE-2024-27263 | 5.3 | Jan 28 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.1 |
| CVE-2020-4761 | 5.3 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a… Affected: 5.2.0.0 through 5.2.6.5_2; 6.0.0.0 through 6.0.3.2; 6.1.0.0 |
| CVE-2018-1679 | 5.3 | Jul 20 | IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive information that could be used in further attacks against… Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2014-0912 | 5.3 | Apr 20 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page Affected: 5.1; 5.2 |