CVE-2025-14483

Published: Mar 13, 2026Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could disclose sensitive host information to authenticated users in responses that could be used in further attacks against the system.

Affected (8)

Products: Ibm: Sterling B2b Integrator, Sterling File Gateway

Ibm

2 products

Sterling B2b Integrator

Sterling File Gateway

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling B2b Integrator	From 6.1.0.0 to 6.1.2.8
Ibm Sterling B2b Integrator	From 6.2.0.0 to 6.2.0.5_2
Ibm Sterling B2b Integrator	From 6.2.1.0 to 6.2.1.1_2
Ibm Sterling B2b Integrator	Version 6.2.2.0
Ibm Sterling File Gateway	From 6.1.0.0 to 6.1.2.8
Ibm Sterling File Gateway	From 6.2.0.0 to 6.2.0.5_2
Ibm Sterling File Gateway	From 6.2.1.0 to 6.2.1.1_2
Ibm Sterling File Gateway	Version 6.2.2.0

Related CWEs

CWE-201

Insertion of Sensitive Information Into Sent Data

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

https://www.ibm.com/support/pages/node/7263329

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.