PT-2026-25362 · Ibm · Ibm Sterling File Gateway+1
CVE-2025-36368
·
Published
2026-03-11
·
Updated
2026-03-13
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7 2
IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.5 1
IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.1 1
Description
The software is susceptible to SQL injection. An administrative user could submit crafted SQL statements, potentially enabling an attacker to view, add, modify, or delete information within the back-end database.
Recommendations
Versions 6.1.0.0 through 6.1.2.7 2 should be updated.
Versions 6.2.0.0 through 6.2.0.5 1 should be updated.
Versions 6.2.1.0 through 6.2.1.1 1 should be updated.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sterling B2B Integrator
Ibm Sterling File Gateway