SF
Product
Sterling File Gateway
106
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 63Low 1
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4423 | 5.3 | Sep 30 | IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system Affected: 2.2.0.0 through 6.0.1.0 |
| CVE-2019-4280 | 5.3 | Sep 30 | IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system Affected: 2.2.0.0 through 6.0.1.0 |
| CVE-2018-1398 | 5.3 | Jul 20 | IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain sensitive information Affected: 2.2.0 through 2.2.6 |
| CVE-2014-0912 | 5.3 | Apr 20 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page Affected: 2.1; 2.2 |
| CVE-2017-1548 | 5.3 | Dec 11 | IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system Affected: 2.2 |
| CVE-2026-1918 | 4.9 | Jul 28 | IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-36348 | 4.9 | Feb 17 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure Affected: 6.1.0.0 through 6.1.2.7_2; 6.2.0.0 through 6.2.0.5; 6.2.1.0 through 6.2.1.1 |
| CVE-2025-2667 | 4.9 | Sep 4 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 could… Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5 |
| CVE-2026-7775 | 4.8 | Jul 28 | Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway Affected: 6.2.0.0 through 6.2.0.6; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-2694 | 4.8 | Sep 4 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 is vulnerable… Affected: 6.0.0.0 before 6.1.2.7_2; 6.2.0.0 before 6.2.0.5 |
| CVE-2025-1349 | 4.8 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.5 |
| CVE-2026-3157 | 4.3 | Jul 28 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2026-3158 | 4.3 | Jul 28 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-2827 | 4.3 | Jul 8 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory information to an authenticated user that… Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5 |
| CVE-2024-54172 | 4.3 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an… Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.5 |
| CVE-2024-22316 | 4.3 | Jan 27 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.1 |
| CVE-2023-47159 | 4.3 | Jan 27 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.1 |
| CVE-2021-20552 | 4.3 | Oct 7 | IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 6.0.1.0 through 6.1.0.2 |
| CVE-2021-20563 | 4.3 | Sep 23 | IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information Affected: 2.2.0.0 through 6.1.0.3 |
| CVE-2021-20485 | 4.3 | Sep 23 | IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 2.2.0.0 through 6.1.0.3 |
| CVE-2020-4763 | 4.3 | Nov 16 | IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or session cookies Affected: 2.2.0.0 through 2.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4665 | 4.3 | Nov 16 | IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on authorization tokens or session cookies Affected: 2.2.0.0 through 2.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4299 | 4.3 | May 14 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request Affected: 5.2.0.0 through 5.2.6.5_1; 6.0.0.0 through 6.0.3.1 |
| CVE-2018-1470 | 4.3 | Jul 20 | IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further attacks… Affected: 2.2.0 through 2.2.6 |
| CVE-2025-1348 | 4.0 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a… Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.5 |
| CVE-2017-1497 | 3.7 | Dec 7 | IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file Affected: 2.2 |
| CVE-2014-6199 | – | Jan 10 | The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot… Affected: 2.1; 2.2 |
| CVE-2013-5413 | – | Dec 21 | IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by… Affected: 2.2 |
| CVE-2013-5411 | – | Dec 21 | IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors Affected: 2.2 |
| CVE-2013-5409 | – | Dec 21 | Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via… Affected: 2.2 |
| CVE-2013-5407 | – | Dec 21 | IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access… Affected: 2.2 |
| CVE-2013-5406 | – | Dec 21 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web… Affected: 2.2 |
| CVE-2013-5405 | – | Dec 21 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web… Affected: 2.2 |
| CVE-2013-4002 | – | Jul 23 | XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1… Affected: 2.1; 2.2 |
| CVE-2013-3020 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via… Affected: 2.1; 2.2 |
| CVE-2013-2987 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via… Affected: 2.1; 2.2 |
| CVE-2013-2985 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via… Affected: 2.1; 2.2 |
| CVE-2013-2984 | – | Jul 3 | Directory traversal vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to read or modify files via… Affected: 2.1; 2.2 |
| CVE-2013-2982 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors Affected: 2.1; 2.2 |
| CVE-2013-0568 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via… Affected: 2.1; 2.2 |
| CVE-2013-0567 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via… Affected: 2.1; 2.2 |
| CVE-2013-0560 | – | Jul 3 | Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL… Affected: 2.1; 2.2 |
| CVE-2013-0558 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via… Affected: 2.1; 2.2 |
| CVE-2013-0539 | – | Jul 3 | An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for… Affected: 2.1; 2.2 |
| CVE-2013-0481 | – | Jul 3 | The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering (1) an error or (2) an… Affected: 2.1; 2.2 |
| CVE-2013-0479 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass… Affected: 2.1; 2.2 |
| CVE-2013-0476 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to inject arbitrary FTP commands via unspecified vectors Affected: 2.1; 2.2 |
| CVE-2013-0475 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via… Affected: 2.1; 2.2 |
| CVE-2013-0468 | – | Jul 3 | Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to inject arbitrary web… Affected: 2.1; 2.2 |
| CVE-2013-0463 | – | Jul 3 | IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via… Affected: 2.1; 2.2 |