Known vulnerabilities in IBM Sterling File Gateway - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_file_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 101
Public exploits: 6
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling File Gateway IBM Sterling File Gateway is affected by 101 known vulnerabilities: 1 critical, 12 high, 56 medium, 32 low Critical High Medium Low

Vulnerabilities (101)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139810 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-7769
CWE-89 Medium
No
No
6.2.0.6, 6.2.1.2, 6.2.2.1 28.07.2026 SB2026072817
#VU137737 - Information Exposure Through Log Files
CVE-2026-33558
CWE-532 Medium
No
No
6.2.1.2, 6.2.2.1 15.07.2026 SB2026071548
SB2026071553
SB2026080425
and 2 more
#VU133460 - Resource exhaustion
CVE-2026-44250
CWE-400 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB2026070933
SB2026083158
and 2 more
#VU133459 - Resource exhaustion
CVE-2026-44890
CWE-400 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB2026070933
SB2026083158
and 2 more
#VU133457 - Incorrect Comparison
CVE-2026-44249
CWE-697 High
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 19 more
#VU133452 - Improper Certificate Validation
CVE-2026-50010
CWE-295 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 18 more
#VU133445 - Resource exhaustion
CVE-2026-47244
CWE-400 Medium
No
No
6.2.1.2.1, 6.2.2.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 6 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554
CWE-362 High
No
No
6.2.1.2, 6.2.2.1 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175
CWE-113 Medium
No
No
6.2.2.1 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 23 more
#VU128406 - Deserialization of Untrusted Data
CVE-2026-41409
CWE-502 High
No
No
6.2.0.6.1, 6.2.1.2, 6.2.2.1 28.04.2026 SB20260428219
SB2026050317
SB2026050318
and 4 more
#VU128405 - Improper Access Control
CVE-2026-41635
CWE-284 High
No
No
6.2.0.6.1, 6.2.1.2, 6.2.2.1 28.04.2026 SB20260428219
SB2026050317
SB2026050318
and 4 more
#VU128373 - Protection Mechanism Failure
CVE-2026-22732
CWE-693 High
No
No
6.2.1.2, 6.2.2.1 28.04.2026 SB20260427181
SB2026043058
SB2026050514
and 5 more
#VU128225 - Configuration
CVE-2026-22748
CWE-16 Low
No
No
6.2.0.6.1, 6.2.1.2.1, 6.2.2.1 27.04.2026 SB20260427181
SB2026052513
SB2026091410
#VU128223 - Improper input validation
CVE-2026-22752
CWE-20 Medium
No
No
6.2.2.1 27.04.2026 SB20260427181
SB20260427183
SB2026052513
and 1 more
#VU126708 - Improper Resource Shutdown or Release
CVE-2026-22740
CWE-404 Low
No
No
6.2.0.6.1, 6.2.1.2.1, 6.2.2.1 21.04.2026 SB2026042162
SB2026052514
SB2026060812
and 3 more
#VU123577 - Missing release of memory after effective lifetime
CVE-2026-1605
CWE-401 Medium
No
No
6.2.1.2, 6.2.2.1 05.03.2026 SB2026030559
SB2026050522
SB2026061616
and 4 more
#VU109961 - Insufficient Verification of Data Authenticity
CVE-2025-41235
CWE-345 Medium
No
No
6.2.1.2, 6.2.2.0 30.05.2025 SB2025053004
SB2025082716
SB2025100115
and 2 more
#VU105881 - Security Features
CVE-2025-22228
CWE-254 Low
No
No
6.2.1.0 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046
CWE-502 High
No
No
6.2.0.6.1, 6.2.1.2, 6.2.2.1 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 23 more
#VU100680 - Improper input validation
CVE-2024-38828
CWE-20 Medium
No
No
6.2.1.0 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 16 more


Showing elements 21 - 40 out of 101