6.5
CVE-2025-2988
- EPSS 0.06%
- Veröffentlicht 19.08.2025 19:15:58
- Zuletzt bearbeitet 17.09.2025 17:56:23
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Sterling B2b Integrator Version >= 6.0.0.0 < 6.1.2.7_1
Ibm ≫ Sterling B2b Integrator Version >= 6.2.0.0 < 6.2.0.5
Ibm ≫ Sterling B2b Integrator Version6.2.1.0
Ibm ≫ Sterling File Gateway Version >= 6.0.0.0 < 6.1.2.7_1
Ibm ≫ Sterling File Gateway Version >= 6.2.0.0 < 6.2.0.5
Ibm ≫ Sterling File Gateway Version6.2.1.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.18 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| psirt@us.ibm.com | 2.7 | 1.2 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
|
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.