Skip to content
Sign in
6.3 Medium

CVE-2025-36115 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session…

Description

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.

Affected products and versions

Product Affected versions Fixed in
Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2 5.2.0.00 → 5.2.0.12 No fix stated

Other CVEs of Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0

The 5 CVEs of Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 →
CVE-2025-36113 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to… 5.4 Medium CVE-2025-36066 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to… 6.1 Medium CVE-2025-36065 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate… 6.3 Medium CVE-2025-36063 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate… 6.3 Medium
Track this CVE