<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: sterling file gateway</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-36431: IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 </title><link>https://patchthecve.com/cve/CVE-2025-36431.html</link><guid>https://patchthecve.com/cve/CVE-2025-36431.html</guid><pubDate>Tue, 29 Sep 2026 19:10:00 +0000</pubDate><description>MEDIUM 5.4: IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially l</description></item><item><title>CVE-2025-36298: IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, a</title><link>https://patchthecve.com/cve/CVE-2025-36298.html</link><guid>https://patchthecve.com/cve/CVE-2025-36298.html</guid><pubDate>Tue, 29 Sep 2026 19:10:00 +0000</pubDate><description>MEDIUM 5.4: IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 Ebics server compone</description></item><item><title>CVE-2026-3158: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_</title><link>https://patchthecve.com/cve/CVE-2026-3158.html</link><guid>https://patchthecve.com/cve/CVE-2026-3158.html</guid><pubDate>Mon, 03 Aug 2026 14:27:47 +0000</pubDate><description>MEDIUM 4.3: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to an information disclosure due to sensitive information be</description></item><item><title>CVE-2026-3157: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_</title><link>https://patchthecve.com/cve/CVE-2026-3157.html</link><guid>https://patchthecve.com/cve/CVE-2026-3157.html</guid><pubDate>Mon, 03 Aug 2026 14:38:50 +0000</pubDate><description>MEDIUM 4.3: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to an information disclosure due to sensitive information be</description></item><item><title>CVE-2026-1918: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_</title><link>https://patchthecve.com/cve/CVE-2026-1918.html</link><guid>https://patchthecve.com/cve/CVE-2026-1918.html</guid><pubDate>Mon, 03 Aug 2026 14:45:44 +0000</pubDate><description>MEDIUM 4.9: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 stores potentially sensitive information in log files that could be read b</description></item><item><title>CVE-2026-7769: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_</title><link>https://patchthecve.com/cve/CVE-2026-7769.html</link><guid>https://patchthecve.com/cve/CVE-2026-7769.html</guid><pubDate>Mon, 03 Aug 2026 15:05:36 +0000</pubDate><description>HIGH 8.1: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to SQL injection. A remote attacker could send specially cra</description></item><item><title>CVE-2026-7362: IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gat</title><link>https://patchthecve.com/cve/CVE-2026-7362.html</link><guid>https://patchthecve.com/cve/CVE-2026-7362.html</guid><pubDate>Mon, 03 Aug 2026 15:17:50 +0000</pubDate><description>MEDIUM 4.3: IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user.</description></item><item><title>CVE-2026-7775: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 </title><link>https://patchthecve.com/cve/CVE-2026-7775.html</link><guid>https://patchthecve.com/cve/CVE-2026-7775.html</guid><pubDate>Wed, 05 Aug 2026 15:47:24 +0000</pubDate><description>MEDIUM 5.5: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to stored cross-site scripting. This vulnerability allows a priv</description></item><item><title>CVE-2026-3482: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_</title><link>https://patchthecve.com/cve/CVE-2026-3482.html</link><guid>https://patchthecve.com/cve/CVE-2026-3482.html</guid><pubDate>Wed, 12 Aug 2026 20:35:16 +0000</pubDate><description>MEDIUM 5.3: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request.</description></item></channel></rss>