SF
Product
Sterling File Gateway
On CISA KEVExploited in the wild
206
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 134Low 3
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38739 | 8.8 | Jan 31 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3 |
| CVE-2024-31903 | 8.8 | Jan 22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system,… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.2 |
| CVE-2022-35638 | 8.8 | Nov 22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow an attacker to… Affected: 6.0.0.0 before 6.0.3.9; 6.1.0.0 before 6.1.2.3 |
| CVE-2022-40231 | 8.8 | Feb 17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper… Affected: 6.0.0.0 through 6.0.3.7; 6.1.0.0 through 6.1.2.0 |
| CVE-2022-40232 | 8.8 | Feb 17 | IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to… Affected: 6.1.0.0 through 6.1.1.1; 6.1.2.0 |
| CVE-2022-43920 | 8.8 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privileges in a different group due to an access control… Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.1.3; 6.1.2.0 |
| CVE-2020-4668 | 8.8 | Apr 8 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an… Affected: 6.0.0.0 through 6.0.3.5; 6.1.0.0 through 6.1.0.3; 6.1.1.0 |
| CVE-2021-29837 | 8.8 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: 5.2.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2020-4762 | 8.8 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due… Affected: 5.2.0.0 through 5.2.6.5_2; 6.0.0.0 through 6.0.3.2; 6.1.0.0 |
| CVE-2019-4728 | 8.8 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system,… Affected: 5.2.0.0 through 5.2.6.5_2; 6.0.0.0 through 6.0.3.2; 6.1.0.0 |
| CVE-2020-4700 | 8.8 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4655 | 8.8 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2019-4680 | 8.8 | Oct 20 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection Affected: 5.2.0.0 through 6.0.2.2 |
| CVE-2019-4387 | 8.8 | Nov 26 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection Affected: 6.0.0.0 through 6.0.2.0 |
| CVE-2017-1174 | 8.8 | Aug 10 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection Affected: 5.2 |
| CVE-2017-1347 | 8.8 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection Affected: 5.2 |
| CVE-2017-1192 | 8.2 | Aug 10 | IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 5.2 |
| CVE-2026-7769 | 8.1 | Jul 28 | SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2014-0927 | 8.1 | Apr 20 | The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to bypass authentication by leveraging… Affected: 5.1; 5.2 |
| CVE-2025-14031 | 7.5 | Mar 17 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2025-36134 | 7.5 | Nov 25 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure Affected: 6.0.0.0 through 6.1.2.7; 6.2.0.0 through 6.2.0.5; 6.2.1.1 |
| CVE-2021-20584 | 7.5 | Oct 7 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls Affected: 2.2.0.0 through 5.2.6.5_4; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.2 |
| CVE-2021-38925 | 7.5 | Oct 6 | IBM Sterling B2B Integrator Standard Edition 5.2.0 Affected: 5.2.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3 |
| CVE-2020-4937 | 7.5 | Nov 20 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… Affected: 5.2.0.0 through 6.0.3.2 |
| CVE-2018-1720 | 7.5 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… Affected: 5.2.0.1; 5.2.6.3_6; 6.0.0.0; 6.0.0.1 |
| CVE-2015-7410 | 7.4 | Jan 1 | The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain… Affected: 5.2 |
| CVE-2025-36368 | 7.2 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1 |
| CVE-2019-4043 | 7.1 | Apr 2 | IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 5.2 through 5.2.6.4; 6.0.0.0 |
Showing 28