CVE-2025-2988

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-497

Affected software

No affected versions have been published.

Timeline

Published: Aug 19, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-298826.5A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a us CVE-2025-298838.8An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow rem CVE-2025-298848.8An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow rem CVE-2025-298858.8An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow rem CVE-2025-298866.5A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the CVE-2025-298877.2A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can CVE-2025-298886.5A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the CVE-2025-298896.5A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the CVE-2025-29895.3A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the fi CVE-2025-298906.5An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains CVE-2025-298914.8Bypass/Injection vulnerability in Apache Camel. This issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0 before 4.8.5, from 3 CVE-2025-298928.8An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who h