LOW🇵🇱 Wersja polska

CVE-2025-36134

CVSS 3.7v3.1pub. 2025-11-25upd. 2025-12-01

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

  • IBM Sterling B2b Integrator

    APP
    Ibm
    6.2.1.16.0.0.0 – 6.1.2.7_2 (excl.)6.2.0.0 – 6.2.0.5_1 (excl.)

  • IBM Sterling File Gateway

    APP
    Ibm
    6.2.1.16.0.0.0 – 6.1.2.7_2 (excl.)6.2.0.0 – 6.2.0.5_1 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2015-7450CRITICAL9.8⚠ KEVPL ✓same product

RCE w produktach IBM via deserializacja Java (Apache Commons Collections)

CVE-2021-39085CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — nieautoryzowany dostęp do bazy danych

CVE-2021-29903CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — zdalny dostęp do bazy danych

CVE-2021-29798CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — zdalny dostęp do bazy danych

CVE-2026-7769HIGH8.1PL ✓same product

SQL Injection w IBM Sterling B2B Integrator i IBM Sterling File Gateway