# IBM Sterling File Gateway.

Every CVE that names IBM Sterling File Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM Sterling File Gateway is Vulnerable to Authentication Bypass](https://agentprime.io/advisories/CVE-2026-75878.md)
  `CVE-2026-75878` · CVE record: IBM Sterling File Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass
- [The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control](https://agentprime.io/advisories/CVE-2026-19273.md)
  `CVE-2026-19273` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Authentication bypass
- [IBM Sterling File Gateway is Vulnerable to Improper Access Control](https://agentprime.io/advisories/CVE-2026-19290.md)
  `CVE-2026-19290` · CVE record: IBM Sterling File Gateway · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control
- [XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway](https://agentprime.io/advisories/CVE-2025-36431.md)
  `CVE-2025-36431` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Cross-site scripting (XSS)
- [Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway](https://agentprime.io/advisories/CVE-2025-36298.md)
  `CVE-2025-36298` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Cross-site scripting (XSS)
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file](https://agentprime.io/advisories/CVE-2026-1918.md)
  `CVE-2026-1918` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Information disclosure
- [Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI](https://agentprime.io/advisories/CVE-2026-3157.md)
  `CVE-2026-3157` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-615
- [Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure](https://agentprime.io/advisories/CVE-2026-3158.md)
  `CVE-2026-3158` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-615
- [Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway](https://agentprime.io/advisories/CVE-2026-7362.md)
  `CVE-2026-7362` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Broken access control
- [SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway](https://agentprime.io/advisories/CVE-2026-7769.md)
  `CVE-2026-7769` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 8.1 High · Not analysed yet · Published 28 Jul 2026 · Tags: SQL injection
- [Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway](https://agentprime.io/advisories/CVE-2026-7775.md)
  `CVE-2026-7775` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Cross-site scripting (XSS)
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass](https://agentprime.io/advisories/CVE-2026-3482.md)
  `CVE-2026-3482` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Broken access control
- [IBM Sterling File Gateway SQL Injection](https://agentprime.io/advisories/CVE-2026-7253.md)
  `CVE-2026-7253` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: SQL injection
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-14504.md)
  `CVE-2025-14504` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site scripting (XSS)
- [The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure](https://agentprime.io/advisories/CVE-2025-36348.md)
  `CVE-2025-36348` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Information disclosure
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure](https://agentprime.io/advisories/CVE-2025-36134.md)
  `CVE-2025-36134` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 3.7 Low · Not analysed yet · Published 25 Nov 2025 · Tags: CWE-1275
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure](https://agentprime.io/advisories/CVE-2025-36112.md)
  `CVE-2025-36112` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 24 Nov 2025 · Tags: Information disclosure
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-36135.md)
  `CVE-2025-36135` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Cross-site scripting (XSS)
- [IBM Sterling B2B Integrator information disclosure](https://agentprime.io/advisories/CVE-2025-36002.md)
  `CVE-2025-36002` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-256, CWE-260
- [IBM Sterling B2B Integrator information disclosure](https://agentprime.io/advisories/CVE-2025-2667.md)
  `CVE-2025-2667` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 2.7 Low · Not analysed yet · Published 4 Sept 2025 · Tags: Information disclosure
- [IBM Sterling B2B Integrator cross-site scripting](https://agentprime.io/advisories/CVE-2025-2694.md)
  `CVE-2025-2694` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 4 Sept 2025 · Tags: Cross-site scripting (XSS)
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure](https://agentprime.io/advisories/CVE-2025-2988.md)
  `CVE-2025-2988` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 2.7 Low · Not analysed yet · Published 19 Aug 2025 · Tags: Information disclosure
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting](https://agentprime.io/advisories/CVE-2025-33008.md)
  `CVE-2025-33008` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2025 · Tags: Cross-site scripting (XSS)
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection](https://agentprime.io/advisories/CVE-2025-33014.md)
  `CVE-2025-33014` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 18 Jul 2025 · Tags: CWE-1022
- [IBM Sterling File Gateway information disclosure](https://agentprime.io/advisories/CVE-2025-2827.md)
  `CVE-2025-2827` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-548
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting](https://agentprime.io/advisories/CVE-2025-2793.md)
  `CVE-2025-2793` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Cross-site scripting (XSS)
- [IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting](https://agentprime.io/advisories/CVE-2025-3630.md)
  `CVE-2025-3630` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Cross-site scripting (XSS)
- [IBM Sterling File Gateway information disclosure](https://agentprime.io/advisories/CVE-2024-47109.md)
  `CVE-2024-47109` · CVE record: IBM Sterling File Gateway · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: Hard-coded credentials
- [IBM Sterling File Gateway cross-site scripting](https://agentprime.io/advisories/CVE-2023-52292.md)
  `CVE-2023-52292` · CVE record: IBM Sterling File Gateway · CVSS 6.4 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: Cross-site scripting (XSS)
- [IBM Sterling File Gateway information disclosure](https://agentprime.io/advisories/CVE-2023-47159.md)
  `CVE-2023-47159` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-204
- [IBM Sterling File Gateway improper access control](https://agentprime.io/advisories/CVE-2024-22316.md)
  `CVE-2024-22316` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: Broken access control
- [IBM Sterling File Gateway cross-site scripting](https://agentprime.io/advisories/CVE-2023-47714.md)
  `CVE-2023-47714` · CVE record: IBM Sterling File Gateway · CVSS 4.8 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: Cross-site scripting (XSS)
- [IBM Sterling File Gateway: IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4…](https://agentprime.io/advisories/CVE-2021-39086.md)
  `CVE-2021-39086` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 16 Aug 2022
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to…](https://agentprime.io/advisories/CVE-2020-4654.md)
  `CVE-2020-4654` · CVE record: IBM Sterling File Gateway · CVSS 3.1 Low · Not analysed yet · Published 8 Oct 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload…](https://agentprime.io/advisories/CVE-2021-20584.md)
  `CVE-2021-20584` · CVE record: IBM Sterling File Gateway · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20561.md)
  `CVE-2021-20561` · CVE record: IBM Sterling File Gateway · CVSS 5.4 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2021-20552.md)
  `CVE-2021-20552` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request…](https://agentprime.io/advisories/CVE-2021-20489.md)
  `CVE-2021-20489` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20481.md)
  `CVE-2021-20481` · CVE record: IBM Sterling File Gateway · CVSS 5.4 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate…](https://agentprime.io/advisories/CVE-2021-20473.md)
  `CVE-2021-20473` · CVE record: IBM Sterling File Gateway · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker…](https://agentprime.io/advisories/CVE-2021-20376.md)
  `CVE-2021-20376` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to…](https://agentprime.io/advisories/CVE-2021-20375.md)
  `CVE-2021-20375` · CVE record: IBM Sterling File Gateway · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user…](https://agentprime.io/advisories/CVE-2021-20372.md)
  `CVE-2021-20372` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user…](https://agentprime.io/advisories/CVE-2021-20563.md)
  `CVE-2021-20563` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 23 Sept 2021
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2021-20485.md)
  `CVE-2021-20485` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 23 Sept 2021
- [IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20484.md)
  `CVE-2021-20484` · CVE record: IBM Sterling File Gateway · CVSS 5.4 Medium · Not analysed yet · Published 23 Sept 2021
- [IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4658.md)
  `CVE-2020-4658` · CVE record: IBM Sterling File Gateway · CVSS 6.1 Medium · Not analysed yet · Published 16 Dec 2020
- [IBM Sterling File Gateway: IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not…](https://agentprime.io/advisories/CVE-2020-4763.md)
  `CVE-2020-4763` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 16 Nov 2020
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not…](https://agentprime.io/advisories/CVE-2020-4665.md)
  `CVE-2020-4665` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 16 Nov 2020
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is…](https://agentprime.io/advisories/CVE-2020-4647.md)
  `CVE-2020-4647` · CVE record: IBM Sterling File Gateway · CVSS 6.3 Medium · Not analysed yet · Published 16 Nov 2020
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow…](https://agentprime.io/advisories/CVE-2020-4476.md)
  `CVE-2020-4476` · CVE record: IBM Sterling File Gateway · CVSS 5.3 Medium · Not analysed yet · Published 16 Nov 2020
- [IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling…](https://agentprime.io/advisories/CVE-2020-4564.md)
  `CVE-2020-4564` · CVE record: IBM Sterling B2B Integrator and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 20 Oct 2020
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could…](https://agentprime.io/advisories/CVE-2020-4259.md)
  `CVE-2020-4259` · CVE record: IBM Sterling File Gateway · CVSS 6.5 Medium · Not analysed yet · Published 14 May 2020
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to…](https://agentprime.io/advisories/CVE-2019-4423.md)
  `CVE-2019-4423` · CVE record: IBM Sterling File Gateway · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2019
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP…](https://agentprime.io/advisories/CVE-2019-4280.md)
  `CVE-2019-4280` · CVE record: IBM Sterling File Gateway · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2019
- [IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2019-4147.md)
  `CVE-2019-4147` · CVE record: IBM Sterling File Gateway · CVSS 4.7 Medium · Not analysed yet · Published 16 Sept 2019
- [IBM Sterling File Gateway: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through…](https://agentprime.io/advisories/CVE-2018-1563.md)
  `CVE-2018-1563` · CVE record: IBM Sterling File Gateway · CVSS 5.4 Medium · Not analysed yet · Published 20 Jul 2018
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker…](https://agentprime.io/advisories/CVE-2018-1470.md)
  `CVE-2018-1470` · CVE record: IBM Sterling File Gateway · CVSS 4.3 Medium · Not analysed yet · Published 20 Jul 2018
- [IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download…](https://agentprime.io/advisories/CVE-2018-1398.md)
  `CVE-2018-1398` · CVE record: IBM Sterling File Gateway · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2018
- [IBM Sterling File Gateway: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through…](https://agentprime.io/advisories/CVE-2017-1575.md)
  `CVE-2017-1575` · CVE record: IBM Sterling File Gateway · CVSS 5.1 Medium · Not analysed yet · Published 20 Jul 2018

Older: <https://agentprime.io/advisories/technology/ibm-sterling-file-gateway.md?cursor=WyIyMDE4LTA3LTIwVDE2OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNy0xNTc1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-sterling-file-gateway>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-sterling-file-gateway/>. Everything for agents: <https://agentprime.io/llms.txt>.