SF
Product
Sterling File Gateway
106
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 63Low 1
Watch
Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3158 | 4.3 | Jul 28 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1 |
| CVE-2025-2827 | 4.3 | Jul 8 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory information to an authenticated user that… Affected: 6.0.0.0 before 6.1.2.7_1; 6.2.0.0 before 6.2.0.5 |
| CVE-2024-54172 | 4.3 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an… Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.5 |
| CVE-2024-22316 | 4.3 | Jan 27 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.1 |
| CVE-2023-47159 | 4.3 | Jan 27 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request… Affected: 6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.1 |
| CVE-2021-20552 | 4.3 | Oct 7 | IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 6.0.1.0 through 6.1.0.2 |
| CVE-2021-20563 | 4.3 | Sep 23 | IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information Affected: 2.2.0.0 through 6.1.0.3 |
| CVE-2021-20485 | 4.3 | Sep 23 | IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 2.2.0.0 through 6.1.0.3 |
| CVE-2020-4763 | 4.3 | Nov 16 | IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or session cookies Affected: 2.2.0.0 through 2.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4665 | 4.3 | Nov 16 | IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on authorization tokens or session cookies Affected: 2.2.0.0 through 2.2.6.5; 6.0.0.0 through 6.0.3.2 |
| CVE-2020-4299 | 4.3 | May 14 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request Affected: 5.2.0.0 through 5.2.6.5_1; 6.0.0.0 through 6.0.3.1 |
| CVE-2018-1470 | 4.3 | Jul 20 | IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further attacks… Affected: 2.2.0 through 2.2.6 |
| CVE-2025-1348 | 4.0 | Jun 18 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a… Affected: 6.0.0.0 before 6.1.2.7; 6.2.0.0 before 6.2.0.5 |