IBM Sterling Integrator vulnerabilities

3 CVEs affecting IBM Sterling Integrator, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7450, published 2016-01-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection., published 2016-01-02. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-10. EPSS: 97.8% chance of exploitation in the next 30 days. Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a…
CVE-2012-5937, published 2013-04-12. High severity, CVSS 9.3. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through…
CVE-2015-5019, published 2015-11-08. Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Sterling Integrator 5.1 before 5010004_8 and Sterling B2B Integrator 5.2 before 5020500_9 allow remote authenticated users to read or upload files by leveraging a password-change requirement.