IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.
2025-07-18T19:15:22.830
2025-08-02T01:42:27.177
Analyzed
CVSSv3.1: 5.4 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | ibm | sterling_b2b_integrator | < 6.1.2.7_1 | Yes |
Application | ibm | sterling_b2b_integrator | < 6.2.0.5 | Yes |
Application | ibm | sterling_file_gateway | < 6.1.2.7_1 | Yes |
Application | ibm | sterling_file_gateway | < 6.2.0.5 | Yes |
Operating System | ibm | aix | - | No |
Operating System | linux | linux_kernel | - | No |
Operating System | microsoft | windows | - | No |