CVE-2013-4002

CVE-2013-4002 affects the Xerces2 Java XML parser. XMLScanner.java in Xerces2 Java Parser before 2.12.0 (as used in various JREs and Oracle/Jakarta distributions) could allow remote denial of service via vectors related to XML attribute names. IBM and other vendors document DoS impact on affected...

CVE-2019-4147

The CVE-2019-4147 entry concerns IBM Sterling File Gateway. The vulnerability is an SQL injection in IBM Sterling File Gateway versions 2.2.0.0 through 6.0.1.0, allowing a remote attacker to view, add, modify, or delete data in the back-end database. IBM’s security bulletin confirms the issue and...

CVE-2023-47159

CVE-2023-47159 affects IBM Sterling File Gateway 6.0.0.0–6.1.2.5 and 6.2.0.0–6.2.0.1. The issue allows an authenticated user to enumerate usernames due to an observable discrepancy in request responses (CWE-204). Impact is information disclosure of usernames; no exploitation details are provided ...

CVE-2021-39086

CVE-2021-39086 affects IBM Sterling File Gateway (versions 6.0.0.0–6.0.3.5, 6.1.0.0–6.1.0.4, and 6.1.1.0–6.1.1.1). The root cause is information disclosure via detailed technical error messages returned in the browser, which could enable further attacks. IBM’s Security Bulletin indicates remediat...

CVE-2023-52292

IBM Sterling File Gateway versions 6.0.0.0–6.1.2.5 and 6.2.0.0–6.2.0.3 are affected by a stored cross-site scripting vulnerability that enables embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Remediation from the IBM bulletin a...

CVE-2013-3020

CVE-2013-3020 is an Information Disclosure vulnerability in IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (versions 2.1/2.2/2.0). The IBM bulletin attributes this to disclosure of application implementation details via unspecified vectors. Affected products/vers...

CVE-2018-1563

CVE-2018-1563 affects IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0–2.2.6). The vulnerability is a cross-site scripting (XSS) flaw in the Web UI that could allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trus...

CVE-2013-0568

IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2) are affected by an Information Disclosure vulnerability (CVE-2013-0568) described as allowing remote authenticated users to obtain sensitive information about application implementation via uns...

CVE-2013-0560

CVE-2013-0560 : IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (2.2/2.1/2.0) are affected by multiple SQL Injection vulnerabilities. The IBM bulletin describes an authenticated remote attacker who can send specially crafted SQL statements through various screens ...

CVE-2017-1550

Affected product: IBM Sterling File Gateway 2.2. Vulnerability: authenticated users could change other users’ passwords due to an access control/security vulnerability. Impact: enables privilege misuse within the product’s user management. References from connected docs: IBM Security Bulletin for...

CVE-2013-0468

IBM Sterling CVE-2013-0468 describes a cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1/5.2 and Sterling File Gateway 2.1/2.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, potentially impacting browser conte...

CVE-2024-22316

CVE-2024-22316 affects IBM Sterling File Gateway versions 6.0.0.0–6.1.2.5 and 6.2.0.0–6.2.0.1, where an authenticated user could perform unauthorized actions on another user’s data due to improper access controls. The Red Hat advisory confirms the same vulnerability and lists affected versions wi...

CVE-2019-4280

IBM Sterling File Gateway (versions 2.2.0.0–6.0.1.0) has an information-disclosure vulnerability (CVE-2019-4280) where sensitive data is exposed in HTTP requests due to how the product handles requests in IBM Sterling B2B Integrator Standard Edition. Potential impact is information exposure that ...

CVE-2013-0567

CVE-2013-0567 affects IBM Sterling File Gateway (2.2 and 2.1) and is described in IBM’s security bulletin as an Information Disclosure vulnerability in that product. The connected IBM bulletin lists multiple related vulnerabilities and remediation steps (APARs/iFixes) for the affected IBM Sterlin...

CVE-2013-2985

CVE-2013-2985 is an information-disclosure vulnerability affecting IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). An authenticated remote user could obtain sensitive information about the application implementation via unspecified vectors. The IBM...

CVE-2013-2987

CVE-2013-2987 is part of an Information Disclosure family affecting IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (versions 2.2/2.1/2.0). The connected IBM Security Bulletin documents multiple vulnerabilities with this family, including 2987, describing that rem...

CVE-2017-1548

CVE-2017-1548 affects IBM Sterling File Gateway 2.2. A remote attacker could trigger directory traversal by sending a crafted URL containing ".." sequences (e.g., /../) to view arbitrary files on the system. IBM’s bulletin confirms the vulnerability and lists remediation: apply the B2B Integrator...

CVE-2012-5937

The CVE-2012-5937 issue affects IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0/5.1, and Sterling B2B Integrator 5.2, as used with IBM Sterling File Gateway 1.1–2.2. The CLA2 server contains an unspecified vulnerability that permits an unauthenticated attacker to execute arbitrary OS c...

CVE-2013-5405

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 are affected by CVE-2013-5405 (Cross-Site Scripting). The IBM security bulletin lists this and related CVEs, detailing that XSS can be triggered via parameters to inject scripts. Affected versions: B2B Integrator 5.2 and File Gateway 2...

CVE-2014-0912

CVE-2014-0912 affects IBM Sterling B2B Integrator 5.1/5.2 and IBM Sterling File Gateway 2.1/2.2, enabling remote attackers to obtain sensitive product information via an error page. Root cause: information disclosure through crafted URL triggering error content. On IBM’s advisory, remediation opt...

CVE-2013-0463

CVE-2013-0463 is an Information Disclosure vulnerability affecting IBM Sterling B2B Integrator 5.0–5.2 and IBM Sterling File Gateway 2.0–2.2. Remote authenticated users could obtain sensitive information about application implementation via unspecified vectors. IBM’s bulletin lists multiple fixes...

CVE-2012-5766

CVE-2012-5766 is described in IBM’s Security Bulletin as an SQL injection issue in IBM Sterling B2B Integrator and Sterling File Gateway. The advisory explicitly ties this CVE to improper validation of user-supplied input on select Sterling screens, affecting IBM Sterling B2B Integrator 5.0–5.2 a...

CVE-2013-0475

The connected IBM security bulletin confirms Information Disclosure vulnerabilities in IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2) tied to multiple CVEs (e.g., CVE-2013-0463, CVE-2013-0475, CVE-2013-0567, CVE-2013-0568, CVE-2013-2985/2987/3020, etc.). These are d...

CVE-2013-0476

CVE-2013-0476 affects IBM Sterling B2B Integrator (5.1, 5.2) and IBM Sterling File Gateway (2.1, 2.2). The IBM Security Bulletin documents this as a Command Injection vulnerability allowing a remote attacker to inject arbitrary FTP commands via unspecified vectors, potentially compromising the se...

CVE-2013-0558

CVE-2013-0558 affects IBM Sterling B2B Integrator 5.1/5.2 and IBM Sterling File Gateway 2.1/2.2. The IBM security bulletin documents this as an Information Disclosure vulnerability allowing remote attackers to obtain sensitive information about application implementation via unspecified vectors. ...

CVE-2013-5406

IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by CVE-2013-5406 (Windows MHTML cross-site scripting). The vulnerability involves XSS via unspecified parameters, enabling a remote attacker to inject script through interactions with the Windows MHTML protocol handler...

CVE-2013-5409

IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by SQL Injection. An authenticated remote attacker could send crafted SQL statements to various screens, enabling view/add/modify/delete data in back-end DB. For affected versions, remediation is available: apply Fix P...

CVE-2017-1575

CVE-2017-1575 affects IBM Sterling File Gateway (IBM Sterling B2B Integrator Standard Edition) 2.2.0–2.2.6. Root cause: use of weaker cryptographic algorithms enabling a local attacker to decrypt highly sensitive information. Impact: information disclosure with local access (C/H). Remediation: ap...

CVE-2013-5411

CVE-2013-5411 concerns IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2, where remote attackers can inject links and trigger unintended navigation or actions via unspecified vectors (Link Injection). The IBM security bulletin aggregates this with other vulnerabilities in the same...

CVE-2019-4423

CVE-2019-4423 affects IBM Sterling File Gateway versions 2.2.0.0–6.0.1.0. The IBM Security Bulletin details a directory-traversal vulnerability exploited by specially crafted URLs containing “dot dot” (/../) to view arbitrary files. The affected product is IBM Sterling File Gateway; root cause is...

CVE-2017-1632

IBM Sterling File Gateway 2.2 is vulnerable to Cross‑Site Scripting (CVE-2017-1632). The vulnerability allows injection of arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. Affected product/version: IBM Sterling File Gateway 2.2. Remedia...

CVE-2020-4299

CVE-2020-4299 affects IBM Sterling B2B Integrator Standard Edition (versions 5.2.0.0–5.2.6.5_1 and 6.0.0.0–6.0.3.1). Root cause is an information disclosure via a specially crafted HTTP request, exposing sensitive data to users. IBM’s bulletin states remediation by upgrading to 5.2.6.5_2 (5.x lin...

CVE-2023-47714

CVE-2023-47714 affects IBM Sterling File Gateway: cross-site scripting in the Web UI allowing arbitrary JavaScript, potentially enabling credentials disclosure in a trusted session. Affected versions: 6.0.0.0–6.0.3.9, 6.1.0.0–6.1.2.3, and 6.2.0.0. Root cause is input handling in the Web UI that d...

CVE-2013-5407

CVE-2013-5407 affects IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 (and older 5.1/2.1 with 2.1). The frame injection vulnerability allows a remote attacker to use crafted web content to bypass access restrictions or access sensitive information by abusing FRAME elements. The ...

CVE-2013-5413

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 are affected by CVE-2013-5413 because logging out does not invalidate the current session, enabling potential authentication bypass on unattended workstations. The IBM bulletin lists remediation for 5.2/2.2 as applying Fix Pack 5020402...

CVE-2020-4647

CVE-2020-4647 affects IBM Sterling File Gateway versions 2.2.0.0–2.2.6.5 and 6.0.0.0–6.0.3.2, which are vulnerable to SQL injection due to unsafe handling of SQL statements in the back-end database. A remote attacker could issue crafted SQL to view, add, modify, or delete data. IBM’s bulletin lis...

CVE-2021-20473

IBM Sterling File Gateway UI versions 2.2.0.0–6.1.1.0 are vulnerable because the product does not invalidate sessions after logout, enabling an authenticated user to impersonate another user. The issue is addressed in IBM’s security bulletin with remediation guidance: upgrade to fixed releases (5...

CVE-2012-5936

Summary (CVE-2012-5936) IBM Sterling B2B Integrator (versions 5.1/5.2) and IBM Sterling File Gateway (2.1/2.2) do not set the secure attribute on session cookies in HTTPS sessions, enabling potential cookie hijacking if captured over HTTP. Affected products/versions (from available docs): IBM Ste...

CVE-2020-4259

CVE-2020-4259 affects IBM Sterling File Gateway. The issue allows an authenticated user to manipulate cookie information and add/remove modules in the cookie, enabling access to functionality not authorized. Affected versions are 2.2.0.0–2.2.6.5_1 and 6.0.0.0–6.0.3.1. IBM assigns a CVSS v3.0/3.1 ...

CVE-2020-4665

CVE-2020-4665 affects IBM Sterling File Gateway versions 2.2.0.0–2.2.6.5 and 6.0.0.0–6.0.3.2. Root cause: the product does not set the secure attribute on authorization tokens or session cookies, enabling cookie values to be exposed when a user clicks an http:// link or visits an attacker-control...

CVE-2020-4763

CVE-2020-4763 affects IBM Sterling File Gateway: vulnerable versions are 6.0.0.0–6.0.3.2 and 2.2.0.0–2.2.6.5_2, where authorization tokens and session cookies are missing the Secure attribute. This allows cookie values to be exposed if users click on an http link or visit a site containing such a...

CVE-2021-20489

IBM Sterling File Gateway is affected by CVE-2021-20489 where the web UI is vulnerable to cross-site request forgery, allowing an attacker to perform actions on behalf of a trusted user. Affected versions are 2.2.0.0–5.2.6.5_3, 6.0.0.0–6.0.0.6, 6.0.1.0–6.0.3.4, and 6.1.0.0–6.1.0.3. Remediation: u...

CVE-2024-47109

IBM Sterling File Gateway UI versions 6.0.0.0–6.1.2.6 and 6.2.0.0–6.2.0.3 expose the server installation path, enabling information leakage that could aid prior or subsequent attacks. CVSS v3.1 base score 5.3 (Network, Low confidentiality impact). Remediation per IBM Security Bulletin: upgrade to...

CVE-2025-36348

IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by information disclosure due to detailed technical error messages returned in the browser. Affected versions are: B2Bi 6.1.0.0–6.1.2.7_2, 6.2.0.0–6.2.0.5, and 6.2.1.0–6.2.1.1; File Gateway 6.1.0.0–6.1.2.7_2, 6.2.0.0–6.2.0.5, ...

CVE-2013-0456

CVE-2013-0456 affects IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2). The connected IBM Security Bulletin confirms a session hijacking risk via a modified cookie path, describing it as an authenticated remote-access issue. Public details list affected products/versi...

CVE-2013-2982

CVE-2013-2982 affects IBM Sterling B2B Integrator (versions 5.1–5.2) and IBM Sterling File Gateway (2.1–2.2). It is an Unrestricted File Upload vulnerability that authenticated remote users can exploit to upload arbitrary files via unspecified vectors, potentially aiding other attacks. IBM’s Secu...

CVE-2020-4564

CVE-2020-4564 affects IBM Sterling B2B Integrator Standard Edition (5.2.0.0–6.0.3.1) and IBM Sterling File Gateway (2.2.0.0–6.0.3.1). The vulnerability is a cross-site scripting flaw in the Web UI that allows an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosur...

CVE-2020-4654

IBM Sterling File Gateway (IBM Sterling File Gateway 2.2.0.0–5.2.6.5_3; 6.0.0.0–6.0.3.4; 6.1.0.0–6.1.0.1) is affected by CVE-2020-4654 due to improper permission control, allowing an authenticated user to obtain sensitive information. The IBM security bulletin documents this as an access-control ...

CVE-2013-0455

CVE-2013-0455 corresponds to multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway; remote attackers could inject arbitrary web script via unspecified vectors. The IBM Security Bulletin confirms XSS among multiple issues but does not pr...

CVE-2013-0481

CVE-2013-0481 affects IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). The issue: errors or exceptions in the console processing may cause stack traces to be displayed in responses, potentially exposing internal implementation details. The CVE is do...