← Back

Sterling File Gateway

sterling_file_gateway

Vendor: Ibm • 93 CVEs

CVEs (93)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-1349
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Jun 17, 2026
Jun 18, 2025
N/A· v4
4.8 MEDIUM· v3
N/A· v2
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary...Show more
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2025-1348
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Jun 17, 2026
Jun 18, 2025
N/A· v4
4.0 MEDIUM· v3
N/A· v2
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a su...Show more
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a suitable caching policy.Show less
CVE-2024-54172
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Jun 17, 2026
Jun 18, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorize...Show more
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.Show less
CVE-2024-54183
1Ibm
2Sterling B2b Integrator
Sterling File Gateway
Jun 17, 2026
Jun 18, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary Java...Show more
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2024-47109
1Ibm
1Sterling File Gateway
Jun 17, 2026
Mar 10, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against the system.
CVE-2024-22316
1Ibm
1Sterling File Gateway
Jun 17, 2026
Jan 27, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls.
CVE-2023-52292
1Ibm
1Sterling File Gateway
Jun 17, 2026
Jan 27, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t...Show more
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2023-47159
1Ibm
1Sterling File Gateway
Jun 17, 2026
Jan 27, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses.
CVE-2023-47714
1Ibm
1Sterling File Gateway
Jun 17, 2026
Apr 12, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin...Show more
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271531.Show less
CVE-2021-39086
1Ibm
1Sterling File Gateway
Jun 17, 2026
Aug 16, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in...Show more
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 215889.Show less
CVE-2020-4654
1Ibm
1Sterling File Gateway
Jun 17, 2026
Oct 8, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090.
CVE-2021-20552
1Ibm
1Sterling File Gateway
Jun 17, 2026
Oct 7, 2021
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in furthe...Show more
IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199170.Show less
CVE-2021-20489
1Ibm
1Sterling File Gateway
Jun 17, 2026
Oct 7, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. I...Show more
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 197790.Show less
CVE-2021-20481
1Ibm
1Sterling File Gateway
Jun 17, 2026
Oct 7, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential...Show more
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197503.Show less
CVE-2021-20473
1Ibm
1Sterling File Gateway
Jun 17, 2026
Oct 7, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944.
CVE-2021-20563
1Ibm
1Sterling File Gateway
Jun 17, 2026
Sep 23, 2021
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepath on the server whi...Show more
IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepath on the server which could be used in further attacks against the system. IBM X-Force ID: 199234.Show less
CVE-2021-20485
1Ibm
1Sterling File Gateway
Jun 17, 2026
Sep 23, 2021
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in furthe...Show more
IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 197667.Show less
CVE-2021-20484
1Ibm
1Sterling File Gateway
Jun 17, 2026
Sep 23, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential...Show more
IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197666.Show less
CVE-2020-4658
1Ibm
1Sterling File Gateway
Jun 17, 2026
Dec 16, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential...Show more
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186095.Show less
CVE-2020-4763
1Ibm
1Sterling File Gateway
Jun 17, 2026
Nov 16, 2020
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http...Show more
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 188897.Show less