CVE-2025-36298 IBM CVE debrief

Who should care

Defenders responsible for IBM Sterling B2B Integrator and Sterling File Gateway deployments should assess exposure and prioritize patching affected versions to prevent potential credential disclosure within trusted sessions.

Why it matters

Defenders should care about CVE-2025-36298 because it allows authenticated users to embed arbitrary JavaScript code in the Web UI of IBM Sterling B2B Integrator and Sterling File Gateway, potentially leading to credentials disclosure within trusted sessions. Affected versions require verification and patching to prevent exploitation.

• Credential disclosure within trusted sessions
• Potential alteration of intended Web UI functionality
• Need for verification of affected versions and patching
• Monitoring for signs of exploitation

Technical summary

The Ebics server component of IBM Sterling B2B Integrator and Sterling File Gateway is vulnerable to cross-site scripting. An authenticated user can embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session. The vulnerability affects various versions of IBM Sterling B2B Integrator and Sterling File Gateway, including 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1. Defenders should prioritize verifying and patching affected versions.

Defensive priority

Defenders should prioritize verifying and patching affected IBM Sterling B2B Integrator and Sterling File Gateway versions, as well as monitoring for potential credential disclosure within trusted sessions.

Recommended defensive actions

• Verify and patch affected IBM Sterling B2B Integrator and Sterling File Gateway versions
• Monitor for potential credential disclosure within trusted sessions
• Implement additional security measures to prevent cross-site scripting attacks
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the affected versions of IBM Sterling B2B Integrator and Sterling File Gateway, as well as the CVSS score and vector. The Ebics server component's vulnerability to cross-site scripting has been confirmed, and defenders should verify the affected scope and severity. The official advisory and CVE record should be reviewed to validate affected scope, severity, and vendor guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.