Sterling File Gateway Security Vulnerabilities and Issues — Sterling File Gateway CVE List

Lucene search

IbmSterling File Gateway

3 matches found

CVE•added 2021/10/07 6:15 p.m.•39 views

CVE-2021-20489

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 197790.

8.8CVSS8.4AI score0.00094EPSS

CVE•added 2020/11/16 5:15 p.m.•36 views

CVE-2020-4647

IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

8.8CVSS8.8AI score0.00372EPSS

CVE•added 2018/04/20 9:29 p.m.•33 views

CVE-2014-0927

The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to bypass authentication by leveraging knowledge of the port number and webapp path. IBM X-Force ID: 92259.

8.1CVSS7.9AI score0.00363EPSS