IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
2025-06-18T17:15:28.560
2025-07-25T17:58:03.213
Analyzed
CVSSv3.1: 5.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | sterling_b2b_integrator | < 6.1.2.7 | Yes |
| Application | ibm | sterling_b2b_integrator | < 6.2.0.5 | Yes |
| Application | ibm | sterling_file_gateway | < 6.1.2.7 | Yes |
| Application | ibm | sterling_file_gateway | < 6.2.0.5 | Yes |
| Operating System | ibm | aix | - | No |
| Operating System | linux | linux_kernel | - | No |
| Operating System | microsoft | windows | - | No |