Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-7253

IBM Sterling File Gateway SQL Injection

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Sterling B2B Integrator

Default version status: unaffected

  • 6.2.1.0 to ≤ 6.2.1.1_2affected
  • 6.2.2.0 to ≤ 6.2.2.0_1affected

IBM Sterling File Gateway

Default version status: unaffected

  • 6.2.1.0 to ≤ 6.2.1.1_2affected
  • 6.2.2.0 to ≤ 6.2.2.0_1affected

References