Vulnerability in Ibm Sterling B2b Integrator
CVE-2025-36112
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user.
EPSS: 0.002 (13.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Ibm Sterling B2b Integrator — versions 6.0.0.0, 6.2.0.0, 6.2.1.1
- Ibm Sterling_b2b_integrator — versions 6.2.1.1
- Ibm Sterling File Gateway — versions 6.0.0.0, 6.2.0.0, 6.2.1.1
- Ibm Sterling_file_gateway — versions 6.2.1.1
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-36112?
- CVE-2025-36112 is a medium-severity vulnerability in Ibm Sterling B2b Integrator, classified under Exposure of Sensitive System Information to an Unauthorized Control Sphere. CVSS score: 5.3/10. Published 2025-11-24.
- How severe is CVE-2025-36112?
- Medium severity. CVSS v3 base score is 5.3 out of 10.