Vulnerability Database

314,433

Total vulnerabilities in the database

CVE-2025-36134

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.

  • Published: Nov 25, 2025
  • Updated: Nov 26, 2025
  • CVE: CVE-2025-36134
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.7
  • AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
ibm / sterling_b2b_integrator 6.0.0.0 6.1.2.7_2
ibm / sterling_b2b_integrator 6.2.0.0 6.2.0.5_1
ibm / sterling_b2b_integrator 6.2.1.1 6.2.1.1.x
ibm / sterling_file_gateway 6.0.0.0 6.1.2.7_2
ibm / sterling_file_gateway 6.2.0.0 6.2.0.5_1
ibm / sterling_file_gateway 6.2.1.1 6.2.1.1.x