CVE-2025-3630 – IBM Sterling B2B Integrator and IBM Sterling File Gateway Stored Cross-Site Scripting Vulnerability

The following table lists the changes that have been made to the
CVE-2025-3630 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Jul. 08, 2025

    Action Type Old Value New Value
    Added Description IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway

    6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4

    is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
    Added CWE CWE-79
    Added Reference https://www.ibm.com/support/pages/node/7239095
Share the Post:

Related Posts