CVE-2026-75878Critical 9.1IBM Sterling File Gateway is Vulnerable to Authentication Bypass0.6%
CVE-2026-19273Medium 5.4The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control0.4%
CVE-2026-19290High 7.5IBM Sterling File Gateway is Vulnerable to Improper Access Control0.5%
CVE-2025-36431Medium 5.4XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway0.2%
CVE-2025-36298Medium 5.4Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway0.2%
CVE-2026-1918Medium 4.9IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file0.4%
CVE-2026-3157Medium 4.3Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI0.3%
CVE-2026-3158Medium 4.3Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure0.3%
CVE-2026-7362Medium 4.3Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway0.3%
CVE-2026-7769High 8.1SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway0.5%
CVE-2026-7775Medium 5.5Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway0.2%
CVE-2026-3482Medium 5.3IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass0.5%
CVE-2021-39086Medium 4.3IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a detailed technical error me1.0%
CVE-2020-4654Low 3.1IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090.0.7%
CVE-2021-20584Medium 6.5IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397.1.4%
CVE-2021-20561Medium 5.4IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun0.6%
CVE-2021-20552Medium 4.3IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information cou1.0%
CVE-2021-20489Medium 4.3IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that t0.4%
CVE-2021-20481Medium 5.4IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun0.6%
CVE-2021-20473Medium 6.3IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force0.5%
CVE-2021-20376Medium 4.3IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 1955680.7%
CVE-2021-20375Medium 6.5IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567.0.8%
CVE-2021-20372Medium 4.3IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518.1.2%
CVE-2021-20563Medium 4.3IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepa0.7%
CVE-2021-20485Medium 4.3IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information cou1.0%
CVE-2021-20484Medium 5.4IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun0.5%
CVE-2020-4658Medium 6.1IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun0.7%
CVE-2020-4763Medium 4.3IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie valu1.0%
CVE-2020-4665Medium 4.3IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie valu1.0%
CVE-2020-4647Medium 6.3IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attac1.0%