Skip to content

Known vulnerabilities in IBM Sterling File Gateway

Is your version affected?

CVE Summary Score Published
CVE-2020-4476 IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain… 5.3 Medium Nov 16, 2020
CVE-2020-4564 IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through… 5.4 Medium Oct 20, 2020
CVE-2020-4259 IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie… 6.5 Medium May 14, 2020
CVE-2019-4423 IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system 5.3 Medium Sep 30, 2019
CVE-2019-4280 IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in… 5.3 Medium Sep 30, 2019
CVE-2019-4147 IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection 4.7 Medium Sep 16, 2019
CVE-2018-1470 IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive… 4.3 Medium Jul 20, 2018
CVE-2018-1563 IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site… 5.4 Medium Jul 20, 2018
CVE-2018-1398 IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain… 5.3 Medium Jul 20, 2018
CVE-2017-1575 IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected… 5.1 Medium Jul 20, 2018
CVE-2017-1544 IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and… 2.4 Low Jul 20, 2018
CVE-2017-1548 IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system Not rated Dec 11, 2017
CVE-2017-1632 IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting Not rated Dec 11, 2017
CVE-2017-1550 IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords Not rated Dec 11, 2017
CVE-2017-1549 IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting Not rated Dec 11, 2017
CVE-2017-1487 IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on… Not rated Dec 7, 2017
CVE-2017-1497 IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing… Not rated Dec 7, 2017

Other IBM products