VULNERABILITY INTELLIGENCE
CVE-2025-36112
CVSS score5.3 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2025-11-24
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user.
Weakness classification
- CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Primary references
- psirt@us.ibm.com — Vendor Advisory