← Back

CVE-2025-33014

nvd nist
Published: Jul 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.

Affected (4)

Ibm
2 products
Sterling B2b Integrator
Sterling File Gateway
Configuration A
4 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Ibm
Sterling B2b Integrator
From 6.0.0.0 to 6.1.2.7_1
Sterling B2b Integrator
From 6.2 to 6.2.0.5
Ibm
Sterling File Gateway
From 6.0.0.0 to 6.1.2.7_1
Sterling File Gateway
From 6.2.0.0 to 6.2.0.5
Running on/withPlatform Versions
Ibm
Aix
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-1022
Use of Web Link to Untrusted Target with window.opener Access
The web application produces links to untrusted external sites outside of its sphere of control, but it does not properly prevent the external site from modifying security-critical properties of the window.opener object, such as the location property.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.