SF
Product
Sterling File Gateway
On CISA KEVExploited in the wild
206
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 134Low 3
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-43579 | 5.4 | Feb 17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.7; 6.1.0.0 through 6.1.2.0 |
| CVE-2022-22352 | 5.4 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.1.2; 6.1.2.0 |
| CVE-2021-38928 | 5.4 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and… Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.1.2; 6.1.2.0 |
| CVE-2021-39035 | 5.4 | Aug 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.0.5; 6.1.1.0 before 6.1.1.2 |
| CVE-2021-20571 | 5.4 | Oct 7 | IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting Affected: 5.2.0.0 through 5.2.6.5_4; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2021-29855 | 5.4 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting Affected: 5.2.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2021-29836 | 5.4 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 Affected: 5.2.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2021-29764 | 5.4 | Oct 6 | IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting Affected: 5.2.0.0 through 6.1.0.3 |
| CVE-2021-20562 | 5.4 | Jul 27 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting Affected: 5.2.0.0 through 5.2.6.5_3; 6.1.0.0 through 6.1.0.2 |
| CVE-2020-4564 | 5.4 | Oct 20 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting Affected: 5.2.0.0 through 6.0.3.1 |
| CVE-2019-4596 | 5.4 | Feb 26 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting Affected: 5.2.0.0 through 5.2.6.5 |
| CVE-2019-4258 | 5.4 | May 1 | IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4148 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4077 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4076 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4075 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4074 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4073 | 5.4 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2019-4029 | 5.4 | Mar 5 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting Affected: 5.2.0.1; 6.0.0.0 |
| CVE-2019-4027 | 5.4 | Mar 5 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting Affected: 5.2.0.1; 6.0.0.0 |
| CVE-2019-4028 | 5.4 | Mar 5 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting Affected: 5.2.0.1; 6.0.0.0 |
| CVE-2018-1718 | 5.4 | Jul 31 | IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2018-1513 | 5.4 | Jul 23 | IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting Affected: after 5.2 through 5.2.6 |
| CVE-2018-1563 | 5.4 | Jul 20 | IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2017-1482 | 5.4 | Dec 7 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting Affected: 5.2 |
| CVE-2017-1496 | 5.4 | Jul 31 | IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting Affected: 5.2; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +1 more |
| CVE-2017-1348 | 5.4 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting Affected: 5.2 |
| CVE-2017-1132 | 5.4 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting Affected: 5.2 |
| CVE-2026-3482 | 5.3 | Jul 22 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-36112 | 5.3 | Nov 24 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure Affected: 6.0.0.0 through 6.1.2.7; 6.2.0.0 through 6.2.0.5; 6.2.1.1 |
| CVE-2024-27263 | 5.3 | Jan 28 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.1 |
| CVE-2020-4761 | 5.3 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a… Affected: 5.2.0.0 through 5.2.6.5_2; 6.0.0.0 through 6.0.3.2; 6.1.0.0 |
| CVE-2018-1679 | 5.3 | Jul 20 | IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive information that could be used in further attacks against… Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2014-0912 | 5.3 | Apr 20 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page Affected: 5.1; 5.2 |
| CVE-2016-9983 | 5.3 | Jun 22 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to Affected: 5.2 |
| CVE-2016-0210 | 5.3 | Feb 8 | IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information Affected: 5.1; 5.2 |
| CVE-2016-5890 | 5.3 | Nov 30 | IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote authenticated users to change arbitrary passwords via unspecified vectors Affected: 5.2 |
| CVE-2026-1918 | 4.9 | Jul 28 | IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-36348 | 4.9 | Feb 17 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5; 6.2.1.0 through 6.2.1.1 |
| CVE-2025-2667 | 4.9 | Sep 4 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 could… Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5 |
| CVE-2026-7775 | 4.8 | Jul 28 | Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.0.0 through 6.2.0.6; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-2694 | 4.8 | Sep 4 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 is vulnerable… Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5 |
| CVE-2025-1349 | 4.8 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting Affected: 6.0.0.0 before 6.1.2.7; 6.2 before 6.2.0.5 |
| CVE-2024-56338 | 4.8 | Mar 11 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.6 ; 6.2 through 6.2.0.3 |
| CVE-2020-4705 | 4.8 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2018-1800 | 4.7 | Sep 20 | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is… Affected: 5.2.6.0 through 5.2.6.3; 6.2.6.1 |
| CVE-2015-7438 | 4.7 | Jan 2 | IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access Affected: 5.2 |
| CVE-2026-3157 | 4.3 | Jul 28 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2026-3158 | 4.3 | Jul 28 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2024-54172 | 4.3 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an… Affected: 6.0.0.0 before 6.1.2.7; 6.2 before 6.2.0.5 |