ibm-sterling-b2b-integrator-poc

IBM Sterling B2B Integrator PoC Proof of concept code for the exploitation of the vulnerabilities discovered against IBM Sterling B2B Integrator, versions 6.2.0.0 to 6.2.0.2, and 6.0.0.0 to 6.1.2.5 for Linux, Windows and AIX systems: LPE Command Injection - if authentication is disabled Pre-auth...

CVE-2026-81209

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-19307

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

EUVD-2026-119727

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-81209

IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition) are vulnerable to CVE-2026-81209 due to improper logging of sensitive credentials (CWE-532 ). This flaw could allow a remote authenticated attacker to obtain sensitive information. Affected versions include B2B Integrato...

CVE-2026-81209 Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-19307

IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition) are affected by an improper authorization vulnerability (CWE-285). A remote authenticated attacker could exploit this to access unauthorized pages. The affected versions include IBM Sterling B2B Integrator versions 6.2.1...

EUVD-2026-119707

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

CVE-2026-19307 Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

CVE-2026-18668

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-12737

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

CVE-2026-18668 Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-18668 Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-18668

IBM Sterling File Gateway and IBM Sterling B2B Integrator are vulnerable to a protection mechanism failure (CWE-693) due to a security misconfiguration. This flaw could allow a remote attacker to perform protocol downgrade attacks . Affected versions include IBM Sterling File Gateway 6.2.1.0 thro...

EUVD-2026-119703

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-18525 IBM Sterling Secure Proxy is vulnerable to multiple issues

IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port...

CVE-2026-18525

IBM Secure Proxy versions 6.1.0.0 through 6.2.1.2 are vulnerable to a denial of service (DoS) condition. The root cause is the improper validation of listener IP address and port , which could be exploited by a remote authenticated attacker. No specific exploit code or remediation steps are provi...

CVE-2026-12737 IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

EUVD-2026-119677

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

CVE-2026-12737

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1_1 are affected by a vulnerability (CWE-532) where potentially sensitive information is stored in log files. This information could be accessed by a local privileged user . To remediate this, users should ap...