# IBM Sterling B2B Integrator vulnerabilities Source: https://junglewise.ai/threats/technologies/sterling-b2b-integrator Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/sterling-b2b-integrator.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 17 vulnerabilities in IBM Sterling B2B Integrator: 3 in the last 7 days and 4 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-81209, was published on 8 November 2026. 3 vulnerabilities in the last four weeks, up 200% on the four before (1). ## Counts - Last 7 days: 3 - Last 30 days: 3 - Last 90 days: 4 - All time: 17 (1 critical, 1 exploited in the wild) ## About IBM Sterling B2B Integrator IBM middleware platform for B2B document and data exchange integration. ## Latest IBM Sterling B2B Integrator vulnerabilities - [CVE-2026-81209: IBM Sterling B2B Integrator and File Gateway sensitive information in logs](https://junglewise.ai/threats/cve-2026-81209-ibm-sterling-b2b-integrator-6-2-1-0-through-6-2-1-2-1-6-2-2-0-6-2) (medium, CVSS 4.9, published 8 Nov 2026) - [CVE-2026-19307: IBM Sterling B2B Integrator and File Gateway improper authorization](https://junglewise.ai/threats/cve-2026-19307-ibm-sterling-b2b-integrator-6-2-1-0-through-6-2-1-2-1-and-6-2-2-0) (medium, CVSS 4.3, published 8 Nov 2026) - [CVE-2026-12737: IBM Sterling B2B Integrator sensitive information disclosure in logs](https://junglewise.ai/threats/cve-2026-12737-ibm-sterling-b2b-integrator-6-2-2-0-through-6-2-2-1-1-and-ibm) (medium, CVSS 4.4, published 8 Nov 2026) - [CVE-2026-19273: IBM Sterling B2B Integrator and File Gateway improper authentication in Dashboard](https://junglewise.ai/threats/cve-2026-19273-ibm-sterling-b2b-integrator-and-file-gateway-improper) (medium, CVSS 5.4, published 14 Sep 2026) - [CVE-2025-36431: IBM Sterling B2B Integrator and File Gateway cross-site scripting in Web UI](https://junglewise.ai/threats/cve-2025-36431-ibm-sterling-b2b-integrator-and-file-gateway-cross-site-scripting) (medium, CVSS 5.4, published 30 Jul 2026) - [CVE-2025-36298: IBM Sterling B2B Integrator XSS in Ebics server](https://junglewise.ai/threats/cve-2025-36298-ibm-sterling-b2b-integrator-xss-in-ebics-server) (medium, CVSS 5.4, published 30 Jul 2026) - [CVE-2026-3158: IBM Sterling B2B Integrator information disclosure in dashboard component](https://junglewise.ai/threats/cve-2026-3158-ibm-sterling-b2b-integrator-information-disclosure-in-dashboard) (medium, CVSS 4.3, published 28 Jul 2026) - [CVE-2026-3157: IBM Sterling B2B Integrator information disclosure in mailbox component](https://junglewise.ai/threats/cve-2026-3157-ibm-sterling-b2b-integrator-information-disclosure-in-mailbox) (medium, CVSS 4.3, published 28 Jul 2026) - [CVE-2026-1918: IBM Sterling B2B Integrator sensitive information disclosure in logs](https://junglewise.ai/threats/cve-2026-1918-ibm-sterling-b2b-integrator-sensitive-information-disclosure-in) (medium, CVSS 4.9, published 28 Jul 2026) - [CVE-2026-7769: IBM Sterling B2B Integrator and Sterling File Gateway SQL injection](https://junglewise.ai/threats/cve-2026-7769-ibm-sterling-b2b-integrator-and-sterling-file-gateway-sql) (high, CVSS 8.1, published 28 Jul 2026) - [CVE-2026-7362: IBM Sterling B2B Integrator and File Gateway improper access control](https://junglewise.ai/threats/cve-2026-7362-ibm-sterling-b2b-integrator-and-file-gateway-improper-access) (medium, CVSS 4.3, published 28 Jul 2026) - [CVE-2026-7775: IBM Sterling B2B Integrator and File Gateway stored XSS in Web UI](https://junglewise.ai/threats/cve-2026-7775-ibm-sterling-b2b-integrator-and-file-gateway-stored-xss-in-web-ui) (medium, CVSS 5.5, published 28 Jul 2026) - [CVE-2026-3482: IBM Sterling B2B Integrator and File Gateway auth bypass](https://junglewise.ai/threats/cve-2026-3482-ibm-sterling-b2b-integrator-and-file-gateway-auth-bypass) (medium, CVSS 5.3, published 22 Jul 2026) - [CVE-2025-36134: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and…](https://junglewise.ai/threats/cve-2025-36134-ibm-sterling-b2b-integrator-and-ibm-sterling-file-gateway-6-0-0-0) (low, CVSS 3.7, published 25 Nov 2025) - [CVE-2025-36112: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and…](https://junglewise.ai/threats/cve-2025-36112-ibm-sterling-b2b-integrator-and-ibm-sterling-file-gateway-6-0-0-0) (medium, CVSS 5.3, published 24 Nov 2025) - [CVE-2025-36135: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway…](https://junglewise.ai/threats/cve-2025-36135-ibm-sterling-b2b-integrator-6-0-0-0-through-6-1-2-7-1-6-2-0-0) (medium, CVSS 5.4, published 7 Nov 2025) - [CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.](https://junglewise.ai/threats/cve-2015-7450-ibm-websphere-application-server-and-server-hypervisor-edition) (critical, exploited in the wild, CVSS 9.8, published 10 Jan 2022) ## Most severe IBM Sterling B2B Integrator vulnerabilities - [CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.](https://junglewise.ai/threats/cve-2015-7450-ibm-websphere-application-server-and-server-hypervisor-edition) (critical, exploited in the wild, CVSS 9.8, published 10 Jan 2022) - [CVE-2026-7769: IBM Sterling B2B Integrator and Sterling File Gateway SQL injection](https://junglewise.ai/threats/cve-2026-7769-ibm-sterling-b2b-integrator-and-sterling-file-gateway-sql) (high, CVSS 8.1, published 28 Jul 2026) - [CVE-2026-7775: IBM Sterling B2B Integrator and File Gateway stored XSS in Web UI](https://junglewise.ai/threats/cve-2026-7775-ibm-sterling-b2b-integrator-and-file-gateway-stored-xss-in-web-ui) (medium, CVSS 5.5, published 28 Jul 2026) - [CVE-2026-19273: IBM Sterling B2B Integrator and File Gateway improper authentication in Dashboard](https://junglewise.ai/threats/cve-2026-19273-ibm-sterling-b2b-integrator-and-file-gateway-improper) (medium, CVSS 5.4, published 14 Sep 2026) - [CVE-2025-36135: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway…](https://junglewise.ai/threats/cve-2025-36135-ibm-sterling-b2b-integrator-6-0-0-0-through-6-1-2-7-1-6-2-0-0) (medium, CVSS 5.4, published 7 Nov 2025) - [CVE-2025-36431: IBM Sterling B2B Integrator and File Gateway cross-site scripting in Web UI](https://junglewise.ai/threats/cve-2025-36431-ibm-sterling-b2b-integrator-and-file-gateway-cross-site-scripting) (medium, CVSS 5.4, published 30 Jul 2026) - [CVE-2025-36298: IBM Sterling B2B Integrator XSS in Ebics server](https://junglewise.ai/threats/cve-2025-36298-ibm-sterling-b2b-integrator-xss-in-ebics-server) (medium, CVSS 5.4, published 30 Jul 2026) - [CVE-2025-36112: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and…](https://junglewise.ai/threats/cve-2025-36112-ibm-sterling-b2b-integrator-and-ibm-sterling-file-gateway-6-0-0-0) (medium, CVSS 5.3, published 24 Nov 2025) - [CVE-2026-3482: IBM Sterling B2B Integrator and File Gateway auth bypass](https://junglewise.ai/threats/cve-2026-3482-ibm-sterling-b2b-integrator-and-file-gateway-auth-bypass) (medium, CVSS 5.3, published 22 Jul 2026) - [CVE-2026-81209: IBM Sterling B2B Integrator and File Gateway sensitive information in logs](https://junglewise.ai/threats/cve-2026-81209-ibm-sterling-b2b-integrator-6-2-1-0-through-6-2-1-2-1-6-2-2-0-6-2) (medium, CVSS 4.9, published 8 Nov 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, up 200% on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other IBM technologies - [IBM API Connect](https://junglewise.ai/threats/technologies/api-connect): 207 vulnerabilities - [IBM AIX](https://junglewise.ai/threats/technologies/aix): 181 vulnerabilities - [IBM Langflow](https://junglewise.ai/threats/technologies/langflow-oss): 154 vulnerabilities - [IBM i](https://junglewise.ai/threats/technologies/i): 120 vulnerabilities - [IBM Guardium Data Protection](https://junglewise.ai/threats/technologies/guardium-data-protection): 93 vulnerabilities - [IBM PowerVM VIOS](https://junglewise.ai/threats/technologies/powervm-vios): 73 vulnerabilities - [IBM Vios](https://junglewise.ai/threats/technologies/vios): 72 vulnerabilities - [IBM WebSphere Application Server](https://junglewise.ai/threats/technologies/websphere-application-server): 67 vulnerabilities - [IBM WebSphere Application Server Liberty](https://junglewise.ai/threats/technologies/websphere-application-server-liberty): 56 vulnerabilities - [IBM Verify Identity Access](https://junglewise.ai/threats/technologies/verify-identity-access): 50 vulnerabilities - [IBM Datastage On Cloud Pak For Data](https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data): 48 vulnerabilities - [IBM Mq](https://junglewise.ai/threats/technologies/mq): 46 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "IBM Sterling B2B Integrator vulnerabilities", https://junglewise.ai/threats/technologies/sterling-b2b-integrator, 9 November 2026.