CVE-2025-14504

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7 2 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.5 1 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.1 1 IBM Sterling B2B Integrator and IBM Sterling File Gateway version 6.2.2.0

Description The software is susceptible to cross-site scripting. This allows an authenticated user to embed arbitrary JavaScript code into the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session.

Recommendations For versions 6.1.0.0 through 6.1.2.7 2, update to a newer version. For versions 6.2.0.0 through 6.2.0.5 1, update to a newer version. For versions 6.2.1.0 through 6.2.1.1 1, update to a newer version. For version 6.2.2.0, update to a newer version.