SF
Product
Sterling File Gateway
On CISA KEVExploited in the wild
206
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 134Low 3
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9983 | 5.3 | Jun 22 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to Affected: 5.2 |
| CVE-2016-0210 | 5.3 | Feb 8 | IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information Affected: 5.1; 5.2 |
| CVE-2016-5890 | 5.3 | Nov 30 | IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote authenticated users to change arbitrary passwords via unspecified vectors Affected: 5.2 |
| CVE-2026-1918 | 4.9 | Jul 28 | IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-36348 | 4.9 | Feb 17 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5; 6.2.1.0 through 6.2.1.1 |
| CVE-2025-2667 | 4.9 | Sep 4 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 could… Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5 |
| CVE-2026-7775 | 4.8 | Jul 28 | Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.0.0 through 6.2.0.6; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-2694 | 4.8 | Sep 4 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 is vulnerable… Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5 |
| CVE-2025-1349 | 4.8 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting Affected: 6.0.0.0 before 6.1.2.7; 6.2 before 6.2.0.5 |
| CVE-2024-56338 | 4.8 | Mar 11 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.1.2.6 ; 6.2 through 6.2.0.3 |
| CVE-2020-4705 | 4.8 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2018-1800 | 4.7 | Sep 20 | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is… Affected: 5.2.6.0 through 5.2.6.3; 6.2.6.1 |
| CVE-2015-7438 | 4.7 | Jan 2 | IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access Affected: 5.2 |
| CVE-2026-3157 | 4.3 | Jul 28 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2026-3158 | 4.3 | Jul 28 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2024-54172 | 4.3 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an… Affected: 6.0.0.0 before 6.1.2.7; 6.2 before 6.2.0.5 |
| CVE-2024-45089 | 4.3 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2023-42016 | 4.3 | Feb 9 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 does not set the secure attribute on authorization tokens or session cookies Affected: 6.0.0.0 through 6.0.3.8; 6.1.0.0 through 6.1.2.3 |
| CVE-2021-38954 | 4.3 | Jun 30 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks… Affected: 6.0.0.0 through 6.0.3.5; 6.1.0.0 through 6.1.1.0 |
| CVE-2021-29700 | 4.3 | Oct 7 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid… Affected: 5.2.0.0 through 5.2.6.5_4; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.2 |
| CVE-2021-20376 | 4.3 | Oct 7 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.1 |
| CVE-2021-20372 | 4.3 | Oct 7 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.1 |
| CVE-2021-29761 | 4.3 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have… Affected: 5.2.0.0 through 6.1.0.3 |
| CVE-2021-29760 | 4.3 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface Affected: 5.2.0.0 through 6.1.0.3 |
| CVE-2021-29758 | 4.3 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper… Affected: 5.2.0.0 through 6.1.0.3 |
| CVE-2020-4646 | 4.3 | May 19 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.3; 6.1.0.0 through 6.1.0.2 |
| CVE-2020-4312 | 4.3 | May 13 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.1 |
| CVE-2019-4726 | 4.3 | Feb 26 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: 5.2.0.0 through 6.0.3.0 |
| CVE-2019-4377 | 4.3 | Jun 25 | IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system Affected: 5.2.0.0 through 6.0.0.1 |
| CVE-2019-4222 | 4.3 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to view process definition of a business process without permission Affected: 6.0.0.0; 6.0.0.1 |
| CVE-2017-1633 | 4.3 | Jul 20 | IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2017-1481 | 4.3 | Dec 7 | IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user Affected: 5.2 |
| CVE-2017-1326 | 4.3 | Jun 22 | IBM Sterling File Gateway does not properly restrict user requests based on permission level Affected: 5.2 |
| CVE-2025-1348 | 4.0 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a… Affected: 6.0.0.0 before 6.1.2.7; 6.2 before 6.2.0.5 |