CVE-2025-14031

IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service

Description

IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticated attacker to send a specially crafted request that causes the application to crash.

Scores

Weaknesses (CWE)

• CWE-77

European references

• ENISA EUVD · EUVD-2025-208811
• GCVE · GCVE-0-2025-14031

CERT-FR advisories

• CERTFR-2026-AVI-0327 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:* ≥ 6.1.0.0 < 6.1.2.8
• cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:* ≥ 6.2.0.0 < 6.2.0.5_2
• cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:* ≥ 6.2.1.0 < 6.2.1.1_2
• cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.2.0:*:*:*:*:*:*:*
• cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:* ≥ 6.1.0.0 < 6.1.2.8
• cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:* ≥ 6.2.0.0 < 6.2.0.5_2
• cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:* ≥ 6.2.1.0 < 6.2.1.1_2
• cpe:2.3:a:ibm:sterling_file_gateway:6.2.2.0:*:*:*:*:*:*:*

Affected products

References

• https://www.ibm.com/support/pages/node/7266520

Sources