6.0
Medium
CVE-2026-7253 IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection
Description
IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IBM Watson Speech Services Cartridge 4.0 | 4.0.0 → 5.3.1 | No fix stated |
| Sterling B2B Integrator 6.2 | 6.2.1.0 → latest | No fix stated |
| Sterling File Gateway 6.2 | 6.2.1.0 → latest | No fix stated |