Vulnerability in Ibm Sterling B2b Integrator
CVE-2025-2988
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.
EPSS: 0.003 (16.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.7 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Ibm Sterling B2b Integrator — versions 6.0.0.0, 6.2.0.0, 6.2.1.0
- Ibm Sterling_b2b_integrator — versions 6.2.1.0
- Ibm Sterling File Gateway — versions 6.0.0.0, 6.2.0.0, 6.2.1.0
- Ibm Sterling_file_gateway — versions 6.2.1.0
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-2988?
- CVE-2025-2988 is a low-severity vulnerability in Ibm Sterling B2b Integrator, classified under Exposure of Sensitive System Information to an Unauthorized Control Sphere. CVSS score: 2.7/10. Published 2025-08-19.
- How severe is CVE-2025-2988?
- Low severity. CVSS v3 base score is 2.7 out of 10.