CVE-2025-2988

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-497

Affected software

VendorProductVersions
IBMSterling B2B Integrator>= 6.0.0.0, <= 6.1.2.7; >= 6.2.0.0, <= 6.2.0.4; 6.2.1.0
IBMSterling File Gateway>= 6.0.0.0, <= 6.1.2.7; >= 6.2.0.0, <= 6.2.0.4; 6.2.1.0

References

Timeline

Published
Aug 19, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-298826.5A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a usCVE-2025-298838.8An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remCVE-2025-298848.8An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remCVE-2025-298858.8An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remCVE-2025-298866.5A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can theCVE-2025-298877.2A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can CVE-2025-298886.5A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can theCVE-2025-298896.5A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can theCVE-2025-29895.3A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the fiCVE-2025-298906.5An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gainsCVE-2025-298914.8Bypass/Injection vulnerability in Apache Camel. This issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0 before 4.8.5, from 3CVE-2025-298928.8An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who h
CVE-2025-2988: Medium severity, CVSS 6.5 | Vulnix