IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
2025-06-18T17:15:28.160
2025-07-25T17:57:51.490
Analyzed
CVSSv3.1: 4.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | sterling_b2b_integrator | < 6.1.2.7 | Yes |
| Application | ibm | sterling_b2b_integrator | < 6.2.0.5 | Yes |
| Application | ibm | sterling_file_gateway | < 6.1.2.7 | Yes |
| Application | ibm | sterling_file_gateway | < 6.2.0.5 | Yes |
| Operating System | ibm | aix | - | No |
| Operating System | linux | linux_kernel | - | No |
| Operating System | microsoft | windows | - | No |