IBM Sterling File Gateway vulnerabilities

105 CVEs affecting IBM Sterling File Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-75878, published 2026-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4002, published 2013-07-23. High severity, CVSS 7.1. EPSS: 24.7% chance of exploitation in the next 30 days. XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7…
CVE-2018-1563, published 2018-07-20. Medium severity, CVSS 5.4. EPSS: 2.8% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
CVE-2019-4423, published 2019-09-30. Medium severity, CVSS 5.3. EPSS: 2.7% chance of exploitation in the next 30 days. IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot"…
CVE-2012-5937, published 2013-04-12. High severity, CVSS 9.3. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through…
CVE-2018-1398, published 2018-07-20. Medium severity, CVSS 5.3. EPSS: 2.3% chance of exploitation in the next 30 days. IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain sensitive information. IBM X-Force ID: 138434.
CVE-2014-0927, published 2018-04-20. High severity, CVSS 8.1. EPSS: 2.3% chance of exploitation in the next 30 days. The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to bypass authentication by leveraging knowledge of the port…
CVE-2017-1548, published 2017-12-11. Medium severity, CVSS 5.3. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view…
CVE-2014-6199, published 2015-01-10. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a…
CVE-2018-1470, published 2018-07-20. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further attacks against the system.…
CVE-2014-0912, published 2018-04-20. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page. IBM X-Force ID:…

Latest

CVE-2026-75878, published 2026-09-18. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header.
CVE-2026-19290, published 2026-09-14. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.
CVE-2026-19273, published 2026-09-14. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard…
CVE-2025-36431, published 2026-07-30. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to…
CVE-2025-36298, published 2026-07-30. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.1.2.0 through 6.1.2.7_2,…
CVE-2026-3158, published 2026-07-28. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and…
CVE-2026-3157, published 2026-07-28. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and…
CVE-2026-1918, published 2026-07-28. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and…
CVE-2026-7769, published 2026-07-28. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and…
CVE-2026-7362, published 2026-07-28. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an…