CVE-2026-7253

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 6.2.1.0 through 6.2.1.1 2 IBM Sterling B2B Integrator version 6.2.2.0 through 6.2.2.0 1 IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.1 2 IBM Sterling File Gateway version 6.2.2.0 through 6.2.2.0 1

Description IBM Sterling B2B Integrator and IBM Sterling File Gateway are subject to server-side request forgery (SSRF), a flaw where an authenticated attacker can induce the server to make unauthorized requests. This can lead to network enumeration or facilitate further attacks. Additionally, these systems are susceptible to SQL injection, allowing a privileged user to execute crafted SQL statements to view, add, modify, or delete data within the back-end database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.