CVE-2025-36368

CWE-89 — SQL Injection3 documents3 sources
Severity
7.2HIGH
EPSS
0.0%
top 92.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Sterling B2B IntegratorIBM Sterling File Gateway
Timeline
PublishedMar 13

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, and 6.2.1.0 through 6.2.1.1_1 are vulnerable to SQL injection. An administrative user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:NExploitability: 1.2 | Impact: 5.2

Affected Packages3 packages

▶NVDibm/sterling_file_gateway6.1.0.0 — 6.1.2.8+2
▶NVDibm/sterling_b2b_integrator6.1.0.0 — 6.1.2.8+2
▶CVEListV5ibm/sterling_b2b_integrator6.1.0.0 — 6.1.2.7_2+2

🔴Vulnerability Details

2
GHSA
GHSA-vgc8-64p2-x3p6: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6↗2026-03-13
▶
CVEList
IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection↗2026-03-13
▶
CVE-2025-36368 (HIGH CVSS 7.2) | IBM Sterling B2B Integrator and IBM | cvebase.io