SF
Product
Sterling File Gateway
On CISA KEVExploited in the wild
206
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 134Low 3
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1564 | 6.7 | Jul 20 | IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages Affected: 5.2.0.1 through 5.2.6.3 |
| CVE-2026-7362 | 6.5 | Jul 28 | Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2026-1264 | 6.5 | Mar 17 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2025-14483 | 6.5 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2025-2988 | 6.5 | Aug 19 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an… Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5; 6.2.1.0 |
| CVE-2023-32341 | 6.5 | Feb 9 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 could allow an authenticated user to cause a denial of service due to uncontrolled resource… Affected: 6.0.0.0 through 6.0.3.8; 6.1.0.0 through 6.1.2.3 |
| CVE-2023-22876 | 6.5 | Mar 15 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in… Affected: 6.0.0.0 before 6.0.3.8; 6.1.0.0 before 6.1.2.2 |
| CVE-2022-22371 | 6.5 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate… Affected: 6.0.0.0 through 6.0.3.6; 6.1.0.0 through 6.1.0.5; 6.1.1.0 through 6.1.1.1; 6.1.2.0 |
| CVE-2022-22337 | 6.5 | Jan 4 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenticated user Affected: 6.0.0.0 before 6.0.3.7; 6.1.0.0 before 6.1.0.6; 6.1.1.0 before 6.1.2.1; 6.1.2.0 |
| CVE-2021-39087 | 6.5 | Aug 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive… Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.0.5; 6.1.1.0 before 6.1.1.2 |
| CVE-2022-22482 | 6.5 | May 17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the… Affected: 6.0.0.0 through 6.0.3.5; 6.1.0.0 through 6.1.1.0 |
| CVE-2021-39033 | 6.5 | Apr 19 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed… Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.1.1 |
| CVE-2021-20375 | 6.5 | Oct 7 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.1 |
| CVE-2019-4738 | 6.5 | Dec 10 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.1 |
| CVE-2020-4692 | 6.5 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4671 | 6.5 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4566 | 6.5 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by… Affected: 5.2.6.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4475 | 6.5 | Nov 16 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed… Affected: 5.2.0.0 through 5.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2015-0194 | 6.5 | Aug 2 | XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a… Affected: 5.1; 5.2 |
| CVE-2017-1193 | 6.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request Affected: 5.2 |
| CVE-2017-1131 | 6.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands Affected: 5.2 |
| CVE-2016-9982 | 6.5 | Jun 22 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control Affected: 5.2 |
| CVE-2024-31914 | 6.4 | Jan 6 | IBM Sterling B2B Integrator cross-site scripting Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.2 |
| CVE-2019-4598 | 6.3 | Feb 26 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection Affected: 5.2.0.0 through 5.2.6.5 |
| CVE-2019-4597 | 6.3 | Feb 26 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection Affected: 5.2.0.0 through 5.2.6.5 |
| CVE-2025-33014 | 6.1 | Jul 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site Affected: 6.0.0.0 before 6.1.2.7_1; 6.2 before 6.2.0.5 |
| CVE-2022-34330 | 6.1 | Jan 5 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting Affected: 6.0.0.0 through 6.0.3.6; 6.1.0.0 through 6.1.0.5; 6.1.1.0 through 6.1.1.2; 6.1.2.0 |
| CVE-2021-20561 | 6.1 | Oct 7 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting Affected: 2.2.0.0 through 5.2.6.5_4; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.2 |
| CVE-2020-4657 | 6.1 | Dec 16 | IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting Affected: 5.2.0.0 through 6.0.3.2 |
| CVE-2019-4595 | 6.1 | Feb 24 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 5.2.0.0 through 5.2.6.5 |
| CVE-2016-6020 | 6.1 | Feb 1 | IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 5.2; 5.2.1; 5.2.2; 5.2.4; 5.2.4.1; 5.2.4.2; +2 more |
| CVE-2016-3057 | 6.1 | Nov 30 | Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote attackers to inject arbitrary web script or… Affected: 5.2 |
| CVE-2015-7431 | 6.1 | Jan 2 | Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL Affected: 5.2 |
| CVE-2026-7253 | 6.0 | Jun 22 | IBM Sterling File Gateway SQL Injection Affected: 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2019-4063 | 5.9 | Mar 5 | IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text Affected: 5.2.0.1; 6.0.0.0 |
| CVE-2025-36002 | 5.5 | Oct 16 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files… Affected: 6.2.0.0 before 6.2.0.5_1; 6.2.1.0 |
| CVE-2023-25682 | 5.5 | Nov 22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that could be read by a… Affected: 6.0.0.0 before 6.0.3.9; 6.1.0.0 before 6.1.2.3 |
| CVE-2017-1349 | 5.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local user Affected: 5.2 |
| CVE-2017-1302 | 5.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls Affected: 5.2 |
| CVE-2016-5893 | 5.5 | Jun 23 | IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system Affected: 5.2 |
| CVE-2015-7437 | 5.5 | Jan 2 | Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors Affected: 5.2 |
| CVE-2026-19273 | 5.4 | Sep 14 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control Affected: 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 |
| CVE-2025-36431 | 5.4 | Jul 30 | XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-36298 | 5.4 | Jul 30 | Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.1.2.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2023-40693 | 5.4 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1 |
| CVE-2025-14504 | 5.4 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2026-0835 | 5.4 | Mar 13 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to cross-site… Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_1; 6.2.1.0 through 6.2.1.1_1; 6.2.2.0 |
| CVE-2025-36135 | 5.4 | Nov 7 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and… Affected: 6.0.0.0 through 6.1.2.7_1; 6.2.0.0 through 6.2.0.5; 6.2.1.0 |
| CVE-2025-33008 | 5.4 | Aug 19 | IBM Sterling B2B Integrator 6.2.1.0 and IBM Sterling File Gateway 6.2.1.0 is vulnerable to cross-site scripting Affected: 6.2.1.0 |
| CVE-2025-3630 | 5.4 | Jul 8 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to… Affected: 6.0.0.0 before 6.1.2.7_1; 6.2 before 6.2.0.5 |