# Ibm Sterling File Gateway


- [CVE-2012-5937](https://insights.sbomify.com/CVE-2012-5937/): Command injection in n/a (critical 9.3)
- [CVE-2026-7769](https://insights.sbomify.com/CVE-2026-7769/): SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (high 8.1)
- [CVE-2014-0927](https://insights.sbomify.com/CVE-2014-0927/): Auth bypass in n/a (high 8.1)
- [CVE-2025-14031](https://insights.sbomify.com/CVE-2025-14031/): IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service (high 7.5)
- [CVE-2026-1264](https://insights.sbomify.com/CVE-2026-1264/): IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls (high 7.1)
- [CVE-2013-4002](https://insights.sbomify.com/CVE-2013-4002/): Missing XML Validation in Apache Xerces2 (high 7.1)
- [CVE-2025-36368](https://insights.sbomify.com/CVE-2025-36368/): IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection (medium 6.5)
- [CVE-2020-4259](https://insights.sbomify.com/CVE-2020-4259/): Missing authorization in Sterling File Gateway (medium 6.5)
- [CVE-2017-1550](https://insights.sbomify.com/CVE-2017-1550/): Missing authorization in Sterling File Gateway (medium 6.5)
- [CVE-2017-1487](https://insights.sbomify.com/CVE-2017-1487/): Information disclosure in Sterling File Gateway (medium 6.5)
- [CVE-2015-0194](https://insights.sbomify.com/CVE-2015-0194/): XML external entity in n/a (medium 6.5)
- [CVE-2013-5409](https://insights.sbomify.com/CVE-2013-5409/): SQL injection in n/a (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/sterling-file-gateway/