HIGH🇵🇱 Wersja polska

CVE-2026-7769

CVSS 8.1v3.1pub. 2026-07-28upd. 2026-08-03

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

  • IBM Sterling B2b Integrator

    APP
    Ibm
    6.2.0.0 – 6.2.0.5_26.2.1.0 – 6.2.1.1_26.2.2.0 – 6.2.2.0_1

  • IBM Sterling File Gateway

    APP
    Ibm
    6.2.0.0 – 6.2.0.5_26.2.1.0 – 6.2.1.1_26.2.2.0 – 6.2.2.0_1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2015-7450CRITICAL9.8⚠ KEVPL ✓same product

RCE w produktach IBM via deserializacja Java (Apache Commons Collections)

CVE-2021-39085CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — nieautoryzowany dostęp do bazy danych

CVE-2021-29903CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — zdalny dostęp do bazy danych

CVE-2021-29798CRITICAL9.8PL ✓same product

SQL Injection w IBM Sterling B2B Integrator — zdalny dostęp do bazy danych

CVE-2025-14031HIGH7.5same product

IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0...