ibm-sterling-b2b-integrator-poc

IBM Sterling B2B Integrator PoC Proof of concept code for the exploitation of the vulnerabilities discovered against IBM Sterling B2B Integrator, versions 6.2.0.0 to 6.2.0.2, and 6.0.0.0 to 6.1.2.5 for Linux, Windows and AIX systems: LPE Command Injection - if authentication is disabled Pre-auth...

Security Bulletin: A Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-73633)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-73633 DESCRIPTION: Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate...

Security Bulletin: Multiple Security Vulnerabilities in Apache Struts affect IBM Sterling B2B Integrator (CVE-2026-73634, CVE-2026-73635)

Summary IBM Sterling B2B Integrator has addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-73634 DESCRIPTION: Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports...

Security Bulletin: Protection Mechanism Failure vulnerability affects IBM Sterling B2B Integrator (CVE-2026-18668)

Summary IBM Sterling B2B Integrator has addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-18668 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration. CWE:CWE-693:...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability (CVE-2026-12737)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-12737 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway stores potentially sensitive information in log files that could be read b...

Security Bulletin: A Security Vulnerability in Apache FreeMarker affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-84939)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-84939 DESCRIPTION: Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed...

Security Bulletin: Multiple Security Vulnerabilities in Jackson affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0...

Security Bulletin: Multiple Security Vulnerabilities in Netty affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-59919 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty'...

Security Bulletin: Multiple Security Vulnerabilities in HttpClient affect IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-64607, CVE-2026-71290)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-64607 DESCRIPTION: HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if ...

Security Bulletin: A Security Vulnerability in Apache MINA Core affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-94301)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-94301 DESCRIPTION: The fix for CVE-2026-47065/ZDRES-232 "resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy",...

Security Bulletin: Multiple Security Vulnerabilities in Apache CXF affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-68079 DESCRIPTION: In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due...

Security Bulletin: Multiple Security Vulnerabilities in Netty affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-59902 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final,...

Security Bulletin: Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-81209)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-81209 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to...

Security Bulletin: A Security Vulnerability in Jansi affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-8484)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-8484 DESCRIPTION: A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl" wrapper due to a lack of size verification for the argument arra...

Security Bulletin: Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-19307)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-19307 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to imprope...

Security Bulletin: Uncontrolled Resource Consumption Security Vulnerability in Jackson-core Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-0003)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details ID:WS-2026-0003 DESCRIPTION: The non-blocking async JSON parser in jackson-core bypasses the maxNumberLength constraint default: 1000 characters defined in...

Security Bulletin: Multiple Security Vulnerabilities in IBM WebSphere Application Server Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerabilities Vulnerability Details CVEID:CVE-2026-10842 DESCRIPTION: IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional...

Security Bulletin: Denial of Service Security Vulnerability in Apache HttpComponents Core affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-54428)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5.4.2 and earlier,...

Security Bulletin: Multiple Security Vulnerabilities in IBM WebSpheere Application Server affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerabilities Vulnerability Details CVEID:CVE-2026-3621 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to...

CVE-2026-19273

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper...