Information Exposure in IBM Sterling B2B Integrator and File Gateway
CVE-2025-36348

4.9MEDIUM

Key Information:

Vendor

IBM
Status
Sterling B2b Integrator
Sterling File Gateway
Vendor
CVE Published:
17 February 2026

What is CVE-2025-36348?

A flaw in IBM Sterling B2B Integrator and File Gateway allows a remote privileged attacker to retrieve sensitive information through detailed technical error messages displayed in the browser. This exposure can potentially aid an attacker in compromising the confidentiality of sensitive data, making it crucial for users of these products to apply recommended patches and mitigations.

Affected Version(s)

Sterling B2B Integrator 6.1.0.0 <= 6.1.2.7_2

Sterling B2B Integrator 6.2.0.0 <= 6.2.0.5

Sterling B2B Integrator 6.2.1.0 <= 6.2.1.1

References

https://www.ibm.com/support/pages/node/7259769
vendor-advisorypatch

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.