HIGH🇵🇱 Wersja polska

CVE-2025-14031

CVSS 7.5v3.1pub. 2026-03-17upd. 2026-03-19

IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticated attacker to send a specially crafted request that causes the application to crash.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • IBM Sterling B2b Integrator

    APP
    Ibm
    6.2.2.06.1.0.0 – 6.1.2.8 (excl.)6.2.0.0 – 6.2.0.5_2 (excl.)6.2.1.0 – 6.2.1.1_2 (excl.)

  • IBM Sterling File Gateway

    APP
    Ibm
    6.2.2.06.2.0.0 – 6.2.0.5_2 (excl.)6.2.1.0 – 6.2.1.1_2 (excl.)6.1.0.0 – 6.1.2.8 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2015-7450CRITICAL9.8⚠ KEVPL ✓same product

RCE w produktach IBM via deserializacja Java (Apache Commons Collections)

CVE-2021-39085CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — nieautoryzowany dostęp do bazy danych

CVE-2021-29903CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — zdalny dostęp do bazy danych

CVE-2021-29798CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — zdalny dostęp do bazy danych

CVE-2026-7769HIGH8.1PL ✓same product

SQL Injection w IBM Sterling B2B Integrator i IBM Sterling File Gateway