5.4
Medium
CVE-2025-2793 IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through…
Description
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling B2B Integrator 6.2 | 6.2.0.0 → 6.2.0.4 | No fix stated |
| Sterling B2B Integrator 6.0 | 6.0.0.0 → 6.1.2.6 | No fix stated |
| Sterling File Gateway 6.2 | 6.2.0.0 → 6.2.0.4 | No fix stated |
| Sterling File Gateway 6.0 | 6.0.0.0 → 6.1.2.6 | No fix stated |
Other CVEs of Sterling B2B Integrator
The 136 CVEs of Sterling B2B Integrator →
CVE-2026-81209
Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
4.9
Medium
CVE-2026-19307
Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
4.3
Medium
CVE-2026-12737
IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability
4.4
Medium
CVE-2026-19273
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File…
5.4
Medium