3.7
Low
CVE-2025-36134 IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and…
Description
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling B2B Integrator 6.2 | 6.2.0.0 → 6.2.1.1 | No fix stated |
| Sterling B2B Integrator 6.0 | 6.0.0.0 → 6.1.2.7 | No fix stated |
| Sterling File Gateway 6.2 | 6.2.0.0 → 6.2.1.1 | No fix stated |
| Sterling File Gateway 6.0 | 6.0.0.0 → 6.1.2.7 | No fix stated |
Other CVEs of Sterling B2B Integrator
The 133 CVEs of Sterling B2B Integrator →
CVE-2026-19273
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File…
5.4
Medium
CVE-2025-36431
IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is…
5.4
Medium
CVE-2025-36298
IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0…
5.4
Medium
CVE-2026-1918
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and…
4.9
Medium