Login Request a demo
SF
Product
Sterling File Gateway
by IBM · last CVE Sep 18, 2026
106
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities106In the news0Timeline
Severity mix
Critical 1High 11Medium 63Low 1
Severity
All severities106Critical1High11Medium63Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-7362
6.5
0%
Jul 28
Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2026-1264
6.5
0%
Mar 17
IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2025-14483
6.5
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2025-2988
6.5
0%
Aug 19
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
Affected: 6.0.0.0 through 6.1.2.7; 6.2.0.0 through 6.2.0.4; 6.2.1.0
CVE-2020-4654
6.5
1%
Oct 8
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control
Affected: 2.2.0.0 before 5.2.6.5_4; 6.0.0.0 before 6.0.3.5; 6.1.0.0 before 6.1.0.2
CVE-2021-20473
6.5
0%
Oct 7
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on…
Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.1
CVE-2020-4259
6.5
1%
May 14
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access…
Affected: 2.2.0.0 through 2.2.6.5_1; 6.0.0.0 through 6.0.3.1
CVE-2017-1550
6.5
1%
Dec 11
IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords
Affected: 2.2
CVE-2017-1487
6.5
1%
Dec 7
IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system
Affected: 2.2
CVE-2015-0194
6.5
1%
Aug 2
XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a…
Affected: 2.1; 2.2
CVE-2025-33014
6.1
0%
Jul 18
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site
Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5
CVE-2021-20481
6.1
1%
Oct 7
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting
Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.1
CVE-2020-4658
6.1
1%
Dec 16
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting
Affected: 2.2.0.0 through 6.0.3.2
CVE-2026-7253
6.0
0%
Jun 22
IBM Sterling File Gateway SQL Injection
Affected: 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2025-36002
5.5
0%
Oct 16
IBM Sterling B2B Integrator information disclosure
Affected: 6.2.0.0 through 6.2.0.5; 6.2.1.0
CVE-2017-1575
5.5
0%
Jul 20
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected cryptographic algorithms that could allow a local attacker…
Affected: 2.2.0 through 2.2.6
CVE-2026-19273
5.4
0%
Sep 14
The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control
Affected: 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1
CVE-2025-36431
5.4
0%
Jul 30
XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.2.2.0 through 6.2.2.0_1
CVE-2025-36298
5.4
0%
Jul 30
Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.1.2.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2023-40693
5.4
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2
CVE-2025-14504
5.4
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2026-0835
5.4
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to cross-site…
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2025-36135
5.4
0%
Nov 7
IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
Affected: 6.0.0.0 through 6.1.2.7_1; 6.2.0.0 through 6.2.0.5; 6.2.1.0
CVE-2025-33008
5.4
0%
Aug 19
IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
Affected: 6.2.1.0
CVE-2025-3630
5.4
0%
Jul 8
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to…
Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5
CVE-2025-2793
5.4
0%
Jul 8
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to…
Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5
CVE-2024-54183
5.4
0%
Jun 18
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting
Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.5
CVE-2023-52292
5.4
0%
Jan 27
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting
Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.3
CVE-2023-47714
5.4
0%
Apr 12
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting
Affected: 6.0.0.0 through 6.0.3.9; 6.1.0.0 through 6.1.2.3; 6.2.0.0
CVE-2021-20484
5.4
0%
Sep 23
IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting
Affected: 2.2.0.0 through 6.1.0.3
CVE-2020-4564
5.4
1%
Oct 20
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting
Affected: 2.2.0.0 through 6.0.3.1
CVE-2018-1563
5.4
3%
Jul 20
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting
Affected: 2.2.0 through 2.2.6
CVE-2017-1632
5.4
1%
Dec 11
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting
Affected: 2.2
CVE-2017-1549
5.4
1%
Dec 11
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting
Affected: 2.2
CVE-2026-3482
5.3
0%
Jul 22
IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass
Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2025-36112
5.3
0%
Nov 24
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
Affected: 6.0.0.0 through 6.1.2.7; 6.2.0.0 through 6.2.0.5; 6.2.1.1
CVE-2024-47109
5.3
0%
Mar 10
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against…
Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.4
CVE-2021-39086
5.3
1%
Aug 16
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a…
Affected: 6.0.0.0 before 6.0.3.6; 6.1.0.0 before 6.1.0.5; 6.1.1.0 before 6.1.1.2
CVE-2019-4423
5.3
3%
Sep 30
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system
Affected: 2.2.0.0 through 6.0.1.0
CVE-2019-4280
5.3
1%
Sep 30
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system
Affected: 2.2.0.0 through 6.0.1.0
CVE-2018-1398
5.3
2%
Jul 20
IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain sensitive information
Affected: 2.2.0 through 2.2.6
CVE-2014-0912
5.3
2%
Apr 20
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page
Affected: 2.1; 2.2
CVE-2017-1548
5.3
2%
Dec 11
IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system
Affected: 2.2
CVE-2026-1918
4.9
0%
Jul 28
IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file
Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2025-36348
4.9
0%
Feb 17
The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5; 6.2.1.0 through 6.2.1.1
CVE-2025-2667
4.9
0%
Sep 4
IBM Sterling B2B Integrator information disclosure
Affected: 6.0.0.0 through 6.1.2.7_1; 6.2.0.0 through 6.2.0.4
CVE-2026-7775
4.8
0%
Jul 28
Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.2.0.0 through 6.2.0.6; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2025-2694
4.8
0%
Sep 4
IBM Sterling B2B Integrator cross-site scripting
Affected: 6.0.0.0 through 6.1.2.7_1; 6.2.0.0 through 6.2.0.4
CVE-2025-1349
4.8
0%
Jun 18
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting
Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.5
CVE-2026-3157
4.3
0%
Jul 28
Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI
Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
Page 1 of 2 · 63 total
12