CVE-2025-14031

Published: Mar 17, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: psirt@us.ibm.com (Secondary)

Description

IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticated attacker to send a specially crafted request that causes the application to crash.

Affected (8)

Products: Ibm: Sterling B2b Integrator, Sterling File Gateway

Ibm

2 products

Sterling B2b Integrator

Sterling File Gateway

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling B2b Integrator	From 6.1.0.0 to 6.1.2.8
Ibm Sterling B2b Integrator	From 6.2.0.0 to 6.2.0.5_2
Ibm Sterling B2b Integrator	From 6.2.1.0 to 6.2.1.1_2
Ibm Sterling B2b Integrator	Version 6.2.2.0
Ibm Sterling File Gateway	From 6.1.0.0 to 6.1.2.8
Ibm Sterling File Gateway	From 6.2.0.0 to 6.2.0.5_2
Ibm Sterling File Gateway	From 6.2.1.0 to 6.2.1.1_2
Ibm Sterling File Gateway	Version 6.2.2.0

Related CWEs

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (1)

https://www.ibm.com/support/pages/node/7266520

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.