Known vulnerabilities in IBM Sterling B2B Integrator

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_b2b_integrator:*:*:*:*:*:*:*:*
Total vulnerabilities: 227
Public exploits: 19
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling B2B Integrator IBM Sterling B2B Integrator is affected by 227 known vulnerabilities: 2 critical, 21 high, 134 medium, 70 low Critical High Medium Low

Vulnerabilities (227)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139191 - Improper Access Control
CVE-2026-7362
CWE-284 Low
No
No
6.2.1.2, 6.2.2.1 23.07.2026 SB2026072321
#VU137737 - Information Exposure Through Log Files
CVE-2026-33558
CWE-532 Medium
No
No
6.2.1.2, 6.2.2.1 15.07.2026 SB2026071548
SB2026071553
SB2026080425
and 2 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554
CWE-362 High
No
No
6.2.1.2, 6.2.2.1 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175
CWE-113 Medium
No
No
6.2.2.1 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 21 more
#VU128406 - Deserialization of Untrusted Data
CVE-2026-41409
CWE-502 High
No
No
6.2.0.6.1, 6.2.1.2, 6.2.2.1 28.04.2026 SB20260428219
SB2026050317
SB2026050318
and 3 more
#VU128405 - Improper Access Control
CVE-2026-41635
CWE-284 High
No
No
6.2.0.6.1, 6.2.1.2, 6.2.2.1 28.04.2026 SB20260428219
SB2026050317
SB2026050318
and 3 more
#VU128373 - Protection Mechanism Failure
CVE-2026-22732
CWE-693 High
No
No
6.2.1.2, 6.2.2.1 28.04.2026 SB20260427181
SB2026043058
SB2026050514
and 5 more
#VU128223 - Improper input validation
CVE-2026-22752
CWE-20 Medium
No
No
6.2.2.1 27.04.2026 SB20260427181
SB20260427183
SB2026052513
and 1 more
#VU123577 - Missing release of memory after effective lifetime
CVE-2026-1605
CWE-401 Medium
No
No
6.2.1.2, 6.2.2.1 05.03.2026 SB2026030559
SB2026050522
SB2026061616
and 4 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249
CWE-693 Medium
No
No
6.2.1.2, 6.2.2.0 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248
CWE-693 Medium
No
No
6.2.1.2, 6.2.2.0 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242
CWE-22 Medium
No
No
6.2.1.2, 6.2.2.0 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU111210 - Improper input validation
CVE-2025-41234
CWE-20 Medium
No
No
6.2.1.2, 6.2.2.0 17.06.2025 SB2025061720
SB2025070709
SB2025071012
and 13 more
#VU109961 - Insufficient Verification of Data Authenticity
CVE-2025-41235
CWE-345 Medium
No
No
6.2.1.2, 6.2.2.0 30.05.2025 SB2025053004
SB2025082716
SB2025100115
and 2 more
#VU109251 - Security Features
CVE-2025-22233
CWE-254 Low
No
No
6.2.1.2, 6.2.2.0 16.05.2025 SB2025051612
SB2025060628
SB2025062507
and 20 more
#VU107966 - Missing Authorization
CVE-2025-22235
CWE-862 Medium
No
No
6.2.1.2, 6.2.2.0 25.04.2025 SB2025042526
SB2025060429
SB2025060529
and 15 more
#VU105881 - Security Features
CVE-2025-22228
CWE-254 Low
No
No
6.2.1.0 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046
CWE-502 High
No
No
6.2.0.6.1, 6.2.1.2, 6.2.2.1 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 22 more
#VU100680 - Improper input validation
CVE-2024-38828
CWE-20 Medium
No
No
6.2.1.0 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 16 more
#VU98795 - Security Features
CVE-2024-38820
CWE-254 Medium
No
No
6.2.1.2, 6.2.2.0 17.10.2024 SB2024101781
SB2024112618
SB2024120428
and 40 more


Showing elements 1 - 20 out of 227