VulnerabilityModified

CVE-2026-7253

IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection.

MEDIUM 6.0EPSS 0.37%

Does this matter?

Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

CVSS 3.1: 6.0 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
EPSS: 0.37% probability · 31th percentile
CISA KEV: Not listed
Weakness: CWE-89
Affected: ibm/watson speech services cartridge
Source: psirt@us.ibm.com

References

https://www.ibm.com/support/pages/node/7280923

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.