CVE-2025-33014
published 2025-07-18CVE-2025-33014: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an…
medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | sterling_b2b_integrator | >= 6.0.0.0 < 6.1.2.7_1 | 6.1.2.7_1 |
| ibm | sterling_b2b_integrator | 6.0.0.0 – 6.1.2.7 | — |
| ibm | sterling_b2b_integrator | >= 6.2 < 6.2.0.5 | 6.2.0.5 |
| ibm | sterling_b2b_integrator | 6.2.0.0 – 6.2.0.4 | — |
| ibm | sterling_file_gateway | >= 6.0.0.0 < 6.1.2.7_1 | 6.1.2.7_1 |
| ibm | sterling_file_gateway | 6.0.0.0 – 6.1.2.7 | — |
| ibm | sterling_file_gateway | >= 6.2.0.0 < 6.2.0.5 | 6.2.0.5 |
| ibm | sterling_file_gateway | 6.2.0.0 – 6.2.0.4 | — |