Known vulnerabilities in IBM Sterling File Gateway - page 4

Software CPE: cpe:2.3:a:ibm_corporation:ibm_sterling_file_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 101
Public exploits: 6
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Sterling File Gateway IBM Sterling File Gateway is affected by 101 known vulnerabilities: 1 critical, 12 high, 56 medium, 32 low Critical High Medium Low

Vulnerabilities (101)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117443 - Improper input validation
CVE-2025-5878
CWE-20 Medium
No
No
6.2.0.5.1, 6.2.1.1.1 22.10.2025 SB2025102210
SB2025112483
SB2026020448
and 1 more
#VU117413 - Unprotected Storage of Credentials
CVE-2025-36002
CWE-256 Low
No
No
6.2.0.5.1, 6.2.1.1 21.10.2025 SB2025102148
SB2025102149
#VU114974 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-2694
CWE-79 Low
No
No
6.1.2.7.1, 6.2.0.4 08.09.2025 SB20250908106
#VU114928 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-2667
CWE-497 Low
No
No
6.1.2.7.2, 6.2.0.5, 6.2.1.1 08.09.2025 SB2025090864
#VU113088 - Use of Web Link to Untrusted Target with window.opener Access
CVE-2025-33014
CWE-1022 Low
No
No
6.1.2.7, 6.2.0.5, 6.2.1.0 21.07.2025 SB2025072129
#VU112257 - Improper input validation
CVE-2025-31672
CWE-20 Medium
No
No
6.1.2.7.1, 6.2.0.5, 6.2.1.1 04.07.2025 SB20250704104
SB2025070708
SB2025071664
and 23 more
#VU111283 - Use of Web Browser Cache Containing Sensitive Information
CVE-2025-1348
CWE-525 Low
No
No
6.1.2.7, 6.2.0.5, 6.2.1.0 18.06.2025 SB2025061865
#VU111281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1349
CWE-79 Low
No
No
6.1.2.7, 6.2.0.5, 6.2.1.0 18.06.2025 SB2025061863
#VU111280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-54183
CWE-79 Low
No
No
6.1.2.7, 6.2.0.5, 6.2.1.0 18.06.2025 SB2025061862
#VU111278 - Cross-Site Request Forgery (CSRF)
CVE-2024-54172
CWE-352 Medium
No
No
6.1.2.7, 6.2.0.5, 6.2.1.0 18.06.2025 SB2025061860
#VU105112 - Resource exhaustion
CVE-2025-23184
CWE-400 Medium
No
No
6.1.2.7.1, 6.2.0.5, 6.2.1.1 28.02.2025 SB2025022807
SB2025030340
SB2025041017
and 40 more
#VU103769 - Resource exhaustion
CVE-2025-25193
CWE-400 Low
No
No
6.1.2.7.1, 6.2.0.5, 6.2.1.1 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141
CWE-200 Medium
No
No
6.1.2.7, 6.2.0.5, 6.2.1.0 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU100676 - Improper Authorization
CVE-2024-38827
CWE-285 Medium
No
No
6.1.2.7, 6.2.0.5, 6.2.1.0 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU100259 - Resource Management Errors
CVE-2024-47535
CWE-399 Low
No
No
6.1.2.7.1, 6.2.0.5, 6.2.1.1 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU86069 - Exposure of sensitive information to an unauthorized actor
CVE-2016-1000345
CWE-200 Medium
No
No
6.0.3.7, 6.1.0.5, 6.1.1.2, 6.1.2.0 05.02.2024 SB2024020522
SB2025011564
SB2018091126
#VU86068 - Key Management Errors
CVE-2016-1000346
CWE-320 Low
No
No
6.0.3.7, 6.1.0.5, 6.1.1.2, 6.1.2.0 05.02.2024 SB2024020522
SB2025011564
SB2018091126
#VU79797 - Improper input validation
CVE-2023-32731
CWE-20 Medium
No
No
6.2.0.5.1, 6.2.1.1.1 21.08.2023 SB2023082198
SB2023082860
SB2023091213
and 28 more
#VU79796 - Improper input validation
CVE-2023-32732
CWE-20 Medium
No
No
6.2.0.5.1, 6.2.1.1.1 21.08.2023 SB2023082198
SB20230821106
SB20230821107
and 16 more
#VU13587 - Cryptographic Issues
CVE-2016-1000339
CWE-310 Low
No
No
6.0.3.7, 6.1.0.5, 6.1.1.2, 6.1.2.0 05.07.2018 SB2018060415
SB2024020522
SB2025011564
and 1 more


Showing elements 61 - 80 out of 101