Advisories · Technology

IBM Sterling File Gateway.

Every CVE that names IBM Sterling File Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75878 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IBM Sterling File Gateway is Vulnerable to Authentication Bypass
- IBM Sterling File Gateway
- Authentication bypass
Not analysed yet 18 Sept 2026
CVE-2026-19273 CVE record

CVSS 5.4 Medium

The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Authentication bypass
Not analysed yet 14 Sept 2026
CVE-2026-19290 CVE record

CVSS 7.5 High

IBM Sterling File Gateway is Vulnerable to Improper Access Control
- IBM Sterling File Gateway
- Broken access control
Not analysed yet 14 Sept 2026
CVE-2025-36431 CVE record

CVSS 5.4 Medium

XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 30 Jul 2026
CVE-2025-36298 CVE record

CVSS 5.4 Medium

Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 30 Jul 2026
CVE-2026-1918 CVE record

CVSS 4.9 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 28 Jul 2026
CVE-2026-3157 CVE record

CVSS 4.3 Medium

Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-615
Not analysed yet 28 Jul 2026
CVE-2026-3158 CVE record

CVSS 4.3 Medium

Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-615
Not analysed yet 28 Jul 2026
CVE-2026-7362 CVE record

CVSS 4.3 Medium

Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Broken access control
Not analysed yet 28 Jul 2026
CVE-2026-7769 CVE record

CVSS 8.1 High

SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- SQL injection
Not analysed yet 28 Jul 2026
CVE-2026-7775 CVE record

CVSS 5.5 Medium

Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 28 Jul 2026
CVE-2026-3482 CVE record

CVSS 5.3 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Broken access control
Not analysed yet 22 Jul 2026
CVE-2026-7253 CVE record

CVSS 6.0 Medium

IBM Sterling File Gateway SQL Injection
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- SQL injection
Not analysed yet 22 Jun 2026
CVE-2025-14504 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2026
CVE-2025-36348 CVE record

CVSS 4.9 Medium

The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 17 Feb 2026
CVE-2025-36134 CVE record

CVSS 3.7 Low

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-1275
Not analysed yet 25 Nov 2025
CVE-2025-36112 CVE record

CVSS 5.3 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 24 Nov 2025
CVE-2025-36135 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2025
CVE-2025-36002 CVE record

CVSS 5.5 Medium

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-256
- CWE-260
Not analysed yet 16 Oct 2025
CVE-2025-2667 CVE record

CVSS 2.7 Low

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 4 Sept 2025
CVE-2025-2694 CVE record

CVSS 4.8 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 4 Sept 2025
CVE-2025-2988 CVE record

CVSS 2.7 Low

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 19 Aug 2025
CVE-2025-33008 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 19 Aug 2025
CVE-2025-33014 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-1022
Not analysed yet 18 Jul 2025
CVE-2025-2827 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway information disclosure
- IBM Sterling File Gateway
- CWE-548
Not analysed yet 8 Jul 2025
CVE-2025-2793 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2025-3630 CVE record

CVSS 6.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2024-47109 CVE record

CVSS 5.3 Medium

IBM Sterling File Gateway information disclosure
- IBM Sterling File Gateway
- Hard-coded credentials
Not analysed yet 10 Mar 2025
CVE-2023-52292 CVE record

CVSS 6.4 Medium

IBM Sterling File Gateway cross-site scripting
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 27 Jan 2025
CVE-2023-47159 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway information disclosure
- IBM Sterling File Gateway
- CWE-204
Not analysed yet 27 Jan 2025
CVE-2024-22316 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway improper access control
- IBM Sterling File Gateway
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2023-47714 CVE record

CVSS 4.8 Medium

IBM Sterling File Gateway cross-site scripting
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2024
CVE-2021-39086 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4…
- IBM Sterling File Gateway
Not analysed yet 16 Aug 2022
CVE-2020-4654 CVE record

CVSS 3.1 Low

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to…
- IBM Sterling File Gateway
Not analysed yet 8 Oct 2021
CVE-2021-20584 CVE record

CVSS 6.5 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload…
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20561 CVE record

CVSS 5.4 Medium

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting.
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20552 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain…
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20489 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request…
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20481 CVE record

CVSS 5.4 Medium

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting.
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20473 CVE record

CVSS 6.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate…
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20376 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker…
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20375 CVE record

CVSS 6.5 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to…
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20372 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user…
- IBM Sterling File Gateway
Not analysed yet 7 Oct 2021
CVE-2021-20563 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user…
- IBM Sterling File Gateway
Not analysed yet 23 Sept 2021
CVE-2021-20485 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain…
- IBM Sterling File Gateway
Not analysed yet 23 Sept 2021
CVE-2021-20484 CVE record

CVSS 5.4 Medium

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting.
- IBM Sterling File Gateway
Not analysed yet 23 Sept 2021
CVE-2020-4658 CVE record

CVSS 6.1 Medium

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting.
- IBM Sterling File Gateway
Not analysed yet 16 Dec 2020
CVE-2020-4763 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not…
- IBM Sterling File Gateway
Not analysed yet 16 Nov 2020
CVE-2020-4665 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not…
- IBM Sterling File Gateway
Not analysed yet 16 Nov 2020
CVE-2020-4647 CVE record

CVSS 6.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is…
- IBM Sterling File Gateway
Not analysed yet 16 Nov 2020
CVE-2020-4476 CVE record

CVSS 5.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow…
- IBM Sterling File Gateway
Not analysed yet 16 Nov 2020
CVE-2020-4564 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling…
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
Not analysed yet 20 Oct 2020
CVE-2020-4259 CVE record

CVSS 6.5 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could…
- IBM Sterling File Gateway
Not analysed yet 14 May 2020
CVE-2019-4423 CVE record

CVSS 5.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to…
- IBM Sterling File Gateway
Not analysed yet 30 Sept 2019
CVE-2019-4280 CVE record

CVSS 5.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP…
- IBM Sterling File Gateway
Not analysed yet 30 Sept 2019
CVE-2019-4147 CVE record

CVSS 4.7 Medium

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection.
- IBM Sterling File Gateway
Not analysed yet 16 Sept 2019
CVE-2018-1563 CVE record

CVSS 5.4 Medium

IBM Sterling File Gateway: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through…
- IBM Sterling File Gateway
Not analysed yet 20 Jul 2018
CVE-2018-1470 CVE record

CVSS 4.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker…
- IBM Sterling File Gateway
Not analysed yet 20 Jul 2018
CVE-2018-1398 CVE record

CVSS 5.3 Medium

IBM Sterling File Gateway: IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download…
- IBM Sterling File Gateway
Not analysed yet 20 Jul 2018
CVE-2017-1575 CVE record

CVSS 5.1 Medium

IBM Sterling File Gateway: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through…
- IBM Sterling File Gateway
Not analysed yet 20 Jul 2018