← CVE Intelligence

CVE-2025-33014

IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection PUBLISHED

Description (CNA)

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser.

Affected (CNA)

Vendor / productVersions
IBM / Sterling B2B Integratoraffected 6.0.0.0 through 6.1.2.7; affected 6.2.0.0 through 6.2.0.4
IBM / Sterling File Gatewayaffected 6.0.0.0 through 6.1.2.7; affected 6.2.0.0 through 6.2.0.4

CWE

CWE-1022

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.