Login Request a demo
SF
Product
Sterling File Gateway
by IBM · last CVE Sep 18, 2026
106
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities106In the news0Timeline
Severity mix
Critical 1High 11Medium 63Low 1
Severity
All severities106Critical1High11Medium63Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-75878
9.1
1%
Sep 18
IBM Sterling File Gateway is Vulnerable to Authentication Bypass
Affected: 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1
CVE-2021-20489
8.8
0%
Oct 7
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3
CVE-2020-4647
8.8
1%
Nov 16
IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection
Affected: 2.2.0.0 through 2.2.6.5; 6.0.0.0 through 6.0.3.2
CVE-2026-7769
8.1
0%
Jul 28
SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2014-0927
8.1
2%
Apr 20
The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to bypass authentication by leveraging…
Affected: 2.1; 2.2
CVE-2017-1544
7.8
0%
Jul 20
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwords in browsers that could be used by a local attacker to…
Affected: 2.2.0 through 2.2.6
CVE-2026-19290
7.5
0%
Sep 14
IBM Sterling File Gateway is Vulnerable to Improper Access Control
Affected: 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1
CVE-2025-14031
7.5
0%
Mar 17
IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2025-36134
7.5
0%
Nov 25
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or…
Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5_1; 6.2.1.1
CVE-2020-4476
7.5
1%
Nov 16
IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message…
Affected: 2.2.0.0 through 2.2.6.5; 6.0.0.0 through 6.0.3.2
CVE-2025-36368
7.2
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2
CVE-2019-4147
7.2
1%
Sep 16
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection
Affected: 2.2 through 6.0.1.0
CVE-2026-7362
6.5
0%
Jul 28
Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2026-1264
6.5
0%
Mar 17
IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2025-14483
6.5
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2025-2988
6.5
0%
Aug 19
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an…
Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5; 6.2.1.0
CVE-2020-4654
6.5
1%
Oct 8
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control
Affected: 2.2.0.0 before 5.2.6.5_4; 6.0.0.0 before 6.0.3.5; 6.1.0.0 before 6.1.0.2
CVE-2021-20473
6.5
0%
Oct 7
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on…
Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.1
CVE-2020-4259
6.5
1%
May 14
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access…
Affected: 2.2.0.0 through 2.2.6.5_1; 6.0.0.0 through 6.0.3.1
CVE-2017-1550
6.5
1%
Dec 11
IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords
Affected: 2.2
CVE-2017-1487
6.5
1%
Dec 7
IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system
Affected: 2.2
CVE-2015-0194
6.5
1%
Aug 2
XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a…
Affected: 2.1; 2.2
CVE-2025-33014
6.1
0%
Jul 18
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site
Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5
CVE-2021-20481
6.1
1%
Oct 7
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting
Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.1
CVE-2020-4658
6.1
1%
Dec 16
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting
Affected: 2.2.0.0 through 6.0.3.2
CVE-2026-7253
6.0
0%
Jun 22
IBM Sterling File Gateway SQL Injection
Affected: 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2025-36002
5.5
0%
Oct 16
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files…
Affected: 6.2.0.0 before 6.2.0.5_1; 6.2.1.0
CVE-2017-1575
5.5
0%
Jul 20
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected cryptographic algorithms that could allow a local attacker…
Affected: 2.2.0 through 2.2.6
CVE-2026-19273
5.4
0%
Sep 14
The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control
Affected: 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1
CVE-2025-36431
5.4
0%
Jul 30
XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.2.2.0 through 6.2.2.0_1
CVE-2025-36298
5.4
0%
Jul 30
Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.1.2.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2023-40693
5.4
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2
CVE-2025-14504
5.4
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2026-0835
5.4
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to cross-site…
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2025-36135
5.4
0%
Nov 7
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and…
Affected: 6.0.0.0 through 6.1.2.7_1; 6.2.0.0 through 6.2.0.5; 6.2.1.0
CVE-2025-33008
5.4
0%
Aug 19
IBM Sterling B2B Integrator 6.2.1.0 and IBM Sterling File Gateway 6.2.1.0 is vulnerable to cross-site scripting
Affected: 6.2.1.0
CVE-2025-3630
5.4
0%
Jul 8
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to…
Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5
CVE-2025-2793
5.4
0%
Jul 8
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to…
Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5
CVE-2024-54183
5.4
0%
Jun 18
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting
Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.5
CVE-2023-52292
5.4
0%
Jan 27
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting
Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3
CVE-2023-47714
5.4
0%
Apr 12
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting
Affected: 6.0.0.0 through 6.0.3.9; 6.1.0.0 through 6.1.2.3; 6.2.0.0
CVE-2021-20484
5.4
0%
Sep 23
IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting
Affected: 2.2.0.0 through 6.1.0.3
CVE-2020-4564
5.4
1%
Oct 20
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting
Affected: 2.2.0.0 through 6.0.3.1
CVE-2018-1563
5.4
3%
Jul 20
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting
Affected: 2.2.0 through 2.2.6
CVE-2017-1632
5.4
1%
Dec 11
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting
Affected: 2.2
CVE-2017-1549
5.4
1%
Dec 11
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting
Affected: 2.2
CVE-2026-3482
5.3
0%
Jul 22
IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass
Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2025-36112
5.3
0%
Nov 24
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration…
Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5_1; 6.2.1.1
CVE-2024-47109
5.3
0%
Mar 10
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against…
Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.4
CVE-2021-39086
5.3
1%
Aug 16
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a…
Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.0.5; 6.1.1.0 before 6.1.1.2
Page 1 of 3 · 106 total
123