VULNERABILITY INTELLIGENCE
CVE-2026-7253
CVSS score6 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2026-06-22
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
Description
IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Weakness classification
- psirt@us.ibm.com: CWE-89