Known vulnerabilities in IBM Sterling File Gateway - page 3
Vendor:
IBM Corporation
Software:
IBM Sterling File Gateway
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_sterling_file_gateway:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
101
Public exploits:
6
Known exploited (KEV):
3
Breakdown by Severity Chart
6.2.0.6.2
6.2.2.1.1
6.2.1.2.1
6.2.0.6.1
6.2.2.1
6.2.1.2
6.2.0.6
6.2.2.0.1
6.2.1.1.2
6.2.0.5.2
6.2.2.0
6.2.1.1_1
6.2.0.5_1
6.1.2.8
6.2.1.1.1
6.2.0.5.1
6.2.0.4
6.1.2.7.2
6.2.1.1
6.1.2.7.1
6.2.1.0
6.2.0.5
6.1.2.7
6.1.2.0
6.1.1.2
6.1.0.5
6.0.3.7
6.2.0.3
6.2.0.2
6.1.2.6
6.2.0.1
6.1.2.5
6.2.0.0
6.1.2.4
6.1.0.8
6.0.3.9
6.0.3.3
5.2.6.5_3
6.0.3.2
2.2.0.0
6.1.1.0
6.1.0.0
6.0.0.0
Vulnerabilities (101)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124131 - Missing Authentication for Critical Function CVE-2026-1264 |
CWE-306 | Medium | 6.1.2.8, 6.2.0.5.2, 6.2.1.1.2, 6.2.2.0.1 | 19.03.2026 |
SB2026031937 |
||
| #VU124130 - Command injection CVE-2025-14031 |
CWE-77 | High | 6.1.2.8, 6.2.0.5.2, 6.2.1.1.2, 6.2.2.0.1 | 19.03.2026 |
SB2026031936 |
||
| #VU123962 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-0835 |
CWE-79 | Low | 6.1.2.8, 6.2.0.5.2, 6.2.1.1.2, 6.2.2.0.1 | 12.03.2026 |
SB2026031243 |
||
| #VU123961 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-14504 |
CWE-79 | Low | 6.1.2.8, 6.2.0.5.2, 6.2.1.1.2, 6.2.2.0.1 | 12.03.2026 |
SB2026031242 |
||
| #VU123960 - Insertion of Sensitive Information Into Sent Data CVE-2025-14483 |
CWE-201 | Low | 6.1.2.8, 6.2.0.5.2, 6.2.1.1.2, 6.2.2.0.1 | 12.03.2026 |
SB2026031241 |
||
| #VU117439 - Improper input validation CVE-2025-48795 |
CWE-20 | Low | 6.1.2.7.2, 6.2.0.5.1, 6.2.1.1.1 | 22.10.2025 |
SB2025102238 SB2025102279 SB2025102286 and 9 more |
||
| #VU117197 - Improper input validation CVE-2025-59250 |
CWE-20 | High | 6.1.2.8, 6.2.0.5.2, 6.2.1.1.2, 6.2.2.0 | 15.10.2025 |
SB2025101554 SB2025121145 SB2025122942 and 6 more |
||
| #VU116142 - Uncontrolled Recursion CVE-2025-53864 |
CWE-674 | Medium | 6.2.0.6, 6.2.1.2, 6.2.2.0 | 26.09.2025 |
SB2025092630 SB2025092631 SB2025100301 and 27 more |
||
| #VU115573 - Protection Mechanism Failure CVE-2025-41249 |
CWE-693 | Medium | 6.2.1.2, 6.2.2.0 | 16.09.2025 |
SB20250916314 SB2025100741 SB20251008143 and 62 more |
||
| #VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-36000 |
CWE-79 | Low | 6.1.2.8, 6.2.0.5_1, 6.2.1.1_1, 6.2.2.0 | 16.09.2025 |
SB20250916311 SB20250916316 SB2025092515 and 25 more |
||
| #VU115570 - Protection Mechanism Failure CVE-2025-41248 |
CWE-693 | Medium | 6.2.1.2, 6.2.2.0 | 16.09.2025 |
SB20250916313 SB2025100741 SB20251008143 and 33 more |
||
| #VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-41242 |
CWE-22 | Medium | 6.2.1.2, 6.2.2.0 | 14.08.2025 |
SB2025081411 SB2025100743 SB2025110336 and 18 more |
||
| #VU113023 - Exposure of sensitive information to an unauthorized actor CVE-2025-22227 |
CWE-200 | Medium | 6.2.0.5.1, 6.2.1.1.1 | 17.07.2025 |
SB2025071765 SB2025072908 SB2025112532 and 6 more |
||
| #VU111210 - Improper input validation CVE-2025-41234 |
CWE-20 | Medium | 6.2.1.2, 6.2.2.0 | 17.06.2025 |
SB2025061720 SB2025070709 SB2025071012 and 13 more |
||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | 6.1.2.7.2, 6.2.0.5.1, 6.2.1.1.1 | 16.06.2025 |
SB2025061643 SB2025061644 SB2025061645 and 141 more |
||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | 6.2.0.4, 6.2.0.5.1, 6.2.1.1.1 | 16.06.2025 |
SB2025061634 SB2025061635 SB2025061927 and 157 more |
||
| #VU109251 - Security Features CVE-2025-22233 |
CWE-254 | Low | 6.2.1.2, 6.2.2.0 | 16.05.2025 |
SB2025051612 SB2025060628 SB2025062507 and 20 more |
||
| #VU107966 - Missing Authorization CVE-2025-22235 |
CWE-862 | Medium | 6.2.1.2, 6.2.2.0 | 25.04.2025 |
SB2025042526 SB2025060429 SB2025060529 and 15 more |
||
| #VU98795 - Security Features CVE-2024-38820 |
CWE-254 | Medium | 6.2.1.2, 6.2.2.0 | 17.10.2024 |
SB2024101781 SB2024112618 SB2024120428 and 40 more |
||
| #VU83992 - Use of Insufficiently Random Values CVE-2020-36732 |
CWE-330 | Medium | 6.1.2.8, 6.2.0.5.2, 6.2.1.1.2, 6.2.2.0 | 08.12.2023 |
SB2023120804 SB2024030742 SB2025091116 and 26 more |
Showing elements 41 - 60 out of 101