SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2025-36431

MEDIUM · CVSS 5.4 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-30 · Last synced 2026-08-29

CyberRota Analysis

AI-Generated

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.2.0 to 6.2.2.0_1 are susceptible to cross-site scripting, enabling authenticated users to inject malicious JavaScript into the Web UI. This could compromise the integrity of user sessions and potentially lead to credential disclosure. Organizations using these products should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2025-36431
Severity
MEDIUM
CVSS
5.4
EPSS
0.17%
Java

Original NVD Description

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Related CVEs

Other vulnerabilities affecting the same vendor(s)