Cross-Site Scripting Vulnerability in IBM Sterling B2B Integrator and File Gateway
CVE-2025-33008
Key Information:
- Vendor
IBM
- Vendor
- CVE Published:
- 19 August 2025
What is CVE-2025-33008?
IBM Sterling B2B Integrator and IBM Sterling File Gateway are susceptible to a cross-site scripting vulnerability that permits authenticated users to inject arbitrary JavaScript code into the Web UI. This malicious code execution could manipulate the application's intended operations, leading to potential disclosure of sensitive credentials during a trusted session. Organizations using affected versions are encouraged to apply recommended patches and implement security best practices to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Sterling B2B Integrator 6.2.1.0
Sterling File Gateway 6.2.1.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved