CVE-2025-2988 in Sterling B2B Integrator

Riassunto

di MITRE • 19/08/2025

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Ibm
• Prenotare: 30/03/2025
• Divulgazione: 19/08/2025
• Moderazione: accettato
• Voce: VDB-320645
• CPE: pronto
• CWE: CWE-497 (confermato)
• CVSS: 6.5 (NVD)
• EPSS: 0.00235
• KEV: no
• Attività: molto basso
• Settore: Industry, Telecommunication, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-2988
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-2988
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-2988/