Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

CVE-2025-14031: IBM Sterling B2B Integrator and IBM Sterling File Gateway Crashes

CVE-2025-14031 · published 7 months ago
Summary

Certain versions of IBM Sterling B2B Integrator and IBM Sterling File Gateway may crash if an attacker sends a special request. This could cause the system to become unavailable or restart, potentially disrupting business operations. IBM recommends updating to the latest version to prevent this issue.

Original advisory text
IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticated attacker to...
IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticated attacker to send a specially crafted request that causes the application to crash.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-77Command Injection
Timeline
Published17 Mar 2026
Updated4 Nov 2026
First seen18 Mar 2026
Sources
Track software like this
Free during beta