IBM Sterling File Gateway
67 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-75878 | 6.2.0.0 – 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 | IBM Sterling File Gateway is Vulnerable to Authentication Bypass | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-19273 | 6.2.0.0 – 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control | MEDIUM 5.4 | 0.4 % | ||
| CVE-2026-19290 | 6.2.0.0 – 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 | IBM Sterling File Gateway is Vulnerable to Improper Access Control | HIGH 7.5 | 0.5 % | ||
| CVE-2025-36431 | 6.2.2.0 – 6.2.2.0_1 | XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-36298 | 6.1.2.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; … | Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-1918 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-3157 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-3158 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-7362 | 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-7769 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway | HIGH 8.1 | 0.5 % | ||
| CVE-2026-7775 | 6.2.0.0 – 6.2.0.6 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-3482 | 6.2.0.0 – 6.2.0.5_2 ; 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-7253 | 6.2.1.0 – 6.2.1.1_2 ; 6.2.2.0 – 6.2.2.0_1 | IBM Sterling File Gateway SQL Injection | HIGH 8.8 | 0.4 % | ||
| CVE-2025-14504 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5_1 ; 6.2.1.0 – 6.2.1.1_1 ; … | IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-36348 | 6.1.0.0 – 6.1.2.7_2 ; 6.2.0.0 – 6.2.0.5 ; 6.2.1.0 – 6.2.1.1 | The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-36134 | 6.0.0.0 – 6.1.2.7 ; 6.2.0.0 – 6.2.0.5 ; 6.2.1.1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure | HIGH 7.5 | 0.3 % | ||
| CVE-2025-36112 | 6.0.0.0 – 6.1.2.7 ; 6.2.0.0 – 6.2.0.5 ; 6.2.1.1 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure | MEDIUM 5.3 | 0.3 % | ||
| CVE-2025-36135 | 6.0.0.0 – 6.1.2.7_1 ; 6.2.0.0 – 6.2.0.5 ; 6.2.1.0 | IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-36002 | 6.2.0.0 – 6.2.0.5 ; 6.2.1.0 | IBM Sterling B2B Integrator information disclosure | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-2667 | 6.0.0.0 – 6.1.2.7_1 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator information disclosure | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-2694 | 6.0.0.0 – 6.1.2.7_1 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator cross-site scripting | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-2988 | 6.0.0.0 – 6.1.2.7 ; 6.2.0.0 – 6.2.0.4 ; 6.2.1.0 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-33008 | 6.2.1.0 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-33014 | 6.0.0.0 – 6.1.2.7 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-2827 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling File Gateway information disclosure | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-2793 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-3630 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.4 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2024-47109 | 6.0.0.0 – 6.1.2.6 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling File Gateway information disclosure | MEDIUM 5.3 | 0.3 % | ||
| CVE-2023-52292 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.3 | IBM Sterling File Gateway cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2023-47159 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.1 | IBM Sterling File Gateway information disclosure | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-22316 | 6.0.0.0 – 6.1.2.5 ; 6.2.0.0 – 6.2.0.1 | IBM Sterling File Gateway improper access control | MEDIUM 4.3 | 0.2 % | ||
| CVE-2023-47714 | 6.0.0.0 – 6.0.3.9 ; 6.1.0.0 – 6.1.2.3 ; 6.2.0.0 | IBM Sterling File Gateway cross-site scripting | MEDIUM 5.4 | 0.3 % | ||
| CVE-2021-39086 | 6.0.0.0 ; 6.1.0.0 ; 6.1.1.0 ; … | IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obt | MEDIUM 5.3 | 1.0 % | ||
| CVE-2020-4654 | 2.2.0.0 ; 6.0.0.0 ; 5.2.6.5_3 ; … | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permissi | MEDIUM 6.5 | 0.7 % | ||
| CVE-2021-20584 | 2.2.0.0 ; 6.0.1.0 ; 6.0.0.0 ; … | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access control | HIGH 7.5 | 1.4 % | ||
| CVE-2021-20561 | 2.2.0.0 ; 6.0.1.0 ; 6.0.0.0 ; … | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-20552 | 6.0.1.0 ; 6.1.0.2 | IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical er | MEDIUM 4.3 | 1.0 % | ||
| CVE-2021-20489 | 2.2.0.0 ; 6.0.1.0 ; 6.0.0.0 ; … | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malic | HIGH 8.8 | 0.4 % | ||
| CVE-2021-20481 | 2.2.0.0 ; 6.0.1.0 ; 6.0.0.0 ; … | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-20473 | 2.2.0.0 ; 6.0.0.0 ; 5.2.6.5_3 ; … | IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated | MEDIUM 6.5 | 0.5 % | ||
| CVE-2021-20376 | 2.2.0.0 ; 6.0.0.0 ; 5.2.6.5_3 ; … | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observa | MEDIUM 4.3 | 0.7 % | ||
| CVE-2021-20375 | 2.2.0.0 ; 6.0.0.0 ; 5.2.6.5_3 ; … | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user | MEDIUM 6.5 | 0.8 % | ||
| CVE-2021-20372 | 2.2.0.0 ; 6.0.1.0 ; 6.0.0.0 ; … | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to | MEDIUM 4.3 | 1.2 % | ||
| CVE-2021-20563 | 2.2.0.0 ; 6.1.0.3 | IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a speci | MEDIUM 4.3 | 0.7 % | ||
| CVE-2021-20485 | 2.2.0.0 ; 6.1.0.3 | IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical er | MEDIUM 4.3 | 1.0 % | ||
| CVE-2021-20484 | 2.2.0.0 ; 6.1.0.3 | IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary | MEDIUM 5.4 | 0.5 % | ||
| CVE-2020-4658 | 2.2.0.0 ; 6.0.3.2 | IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary | MEDIUM 6.1 | 0.7 % | ||
| CVE-2020-4763 | 2.2.0.0 ; 6.0.3.2 ; 2.2.6.5 ; … | IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or s | MEDIUM 4.3 | 1.0 % | ||
| CVE-2020-4665 | 2.2.0.0 ; 6.0.3.2 ; 2.2.6.5 ; … | IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on authorization tokens or s | MEDIUM 4.3 | 1.0 % | ||
| CVE-2020-4647 | 2.2.0.0 ; 6.0.3.2 ; 2.2.6.5 ; … | IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection. A remote attacker could send s | HIGH 8.8 | 1.0 % | ||
| CVE-2020-4476 | 2.2.0.0 ; 6.0.3.2 ; 2.2.6.5 ; … | IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information | HIGH 7.5 | 1.5 % | ||
| CVE-2020-4564 | 2.2.0.0 ; 6.0.3.1 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to | MEDIUM 5.4 | 0.7 % | ||
| CVE-2020-4259 | 2.2.0.0 ; 6.0.3.1 | IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add mo | MEDIUM 6.5 | 0.8 % | ||
| CVE-2019-4423 | 2.2.0.0 ; 6.0.1.0 | IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could sen | MEDIUM 5.3 | 2.7 % | ||
| CVE-2019-4280 | 2.2.0.0 ; 6.0.1.0 | IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks aga | MEDIUM 5.3 | 0.8 % | ||
| CVE-2019-4147 | 2.2.0.0 ; 6.0.1.0 | IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL stateme | HIGH 7.2 | 1.3 % | ||
| CVE-2018-1563 | 2.2.0 ; 2.2.6 | IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vul | MEDIUM 5.4 | 2.8 % | ||
| CVE-2018-1470 | 2.2.0 ; 2.2.6 | IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the U | MEDIUM 4.3 | 1.8 % | ||
| CVE-2018-1398 | 2.2.0 ; 2.2.6 | IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain sensitive informati | MEDIUM 5.3 | 2.3 % | ||
| CVE-2017-1575 | 2.2.0 ; 2.2.6 | IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected cryptographic algorit | MEDIUM 5.5 | 0.2 % | ||
| CVE-2017-1544 | 2.2.0 ; 2.2.6 | IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwords in browsers that | HIGH 7.8 | 0.4 % | ||
| CVE-2017-1632 | 2.2 | IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1550 | 2.2 | IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290. | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-1549 | 2.2 | IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t | MEDIUM 5.4 | 0.8 % | ||
| CVE-2017-1548 | 2.2 | IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafte | MEDIUM 5.3 | 2.2 % | ||
| CVE-2017-1497 | 2.2 | IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the director | LOW 3.7 | 1.0 % | ||
| CVE-2017-1487 | 2.2 | IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-F | MEDIUM 6.5 | 1.1 % |