Login Request a demo
SF
Product
Sterling File Gateway
by IBM · last CVE Sep 18, 2026
106
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities106In the news0Timeline
Severity mix
Critical 1High 11Medium 63Low 1
Severity
All severities106Critical1High11Medium63Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sterling File Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-20489
8.8
0%
Oct 7
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
Affected: 2.2.0.0 through 5.2.6.5_3; 6.0.0.0 through 6.0.0.6; 6.0.1.0 through 6.0.3.4; 6.1.0.0 through 6.1.0.3
CVE-2020-4647
8.8
1%
Nov 16
IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection
Affected: 2.2.0.0 through 2.2.6.5; 6.0.0.0 through 6.0.3.2
CVE-2026-7769
8.1
0%
Jul 28
SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
Affected: 6.2.0.0 through 6.2.0.5_2; 6.2.1.0 through 6.2.1.1_2; 6.2.2.0 through 6.2.2.0_1
CVE-2014-0927
8.1
2%
Apr 20
The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to bypass authentication by leveraging…
Affected: 2.1; 2.2
CVE-2017-1544
7.8
0%
Jul 20
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwords in browsers that could be used by a local attacker to…
Affected: 2.2.0 through 2.2.6
CVE-2026-19290
7.5
0%
Sep 14
IBM Sterling File Gateway is Vulnerable to Improper Access Control
Affected: 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1
CVE-2025-14031
7.5
0%
Mar 17
IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2; 6.2.2.0
CVE-2025-36134
7.5
0%
Nov 25
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
Affected: 6.0.0.0 through 6.1.2.7; 6.2.0.0 through 6.2.0.5; 6.2.1.1
CVE-2020-4476
7.5
1%
Nov 16
IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message…
Affected: 2.2.0.0 through 2.2.6.5; 6.0.0.0 through 6.0.3.2
CVE-2025-36368
7.2
0%
Mar 13
IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection
Affected: 6.1.0.0 before 6.1.2.8; 6.2.0.0 before 6.2.0.5_2; 6.2.1.0 before 6.2.1.1_2
CVE-2019-4147
7.2
1%
Sep 16
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection
Affected: 2.2 through 6.0.1.0
Showing 11