{"id":"CVE-2025-2988","aliases":["EUVD-2025-25219","GHSA-48wm-29g7-w3qw"],"status":"published","title":"IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure","description":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.","severity":{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00275,"percentile":0.20078,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-497"],"published":"2025-08-19T19:15:58Z","modified":"2026-06-17T09:07:59Z","products":[{"vendor":"ibm","product":"sterling b2b integrator"},{"vendor":"ibm","product":"sterling file gateway"},{"vendor":"ibm","product":"sterling_b2b_integrator"},{"vendor":"ibm","product":"sterling_file_gateway"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7242391","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2988"},{"url":"https://github.com/advisories/GHSA-48wm-29g7-w3qw"}],"sources":{"cve":[{"id":"CVE-2025-2988","title":"IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure","description":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.","status":"published","published":"2025-08-19T19:15:58.525Z","modified":"2025-08-19T19:35:55.065Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-497"],"updated_at":"2026-11-02T14:32:39.039362Z"}],"euvd":[{"id":"EUVD-2025-25219","description":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.","status":"published","published":"2025-08-19T19:15:58Z","modified":"2025-08-19T19:35:55Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T20:31:55.90596Z"}],"ghsa":[{"id":"GHSA-48wm-29g7-w3qw","title":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0...","description":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.","status":"published","published":"2025-08-19T21:30:37Z","modified":"2025-08-19T21:30:49Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-497"],"updated_at":"2026-11-02T15:03:20.338761Z"}],"nvd":[{"id":"CVE-2025-2988","description":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorized user that could aid in further attacks against the system.","status":"published","published":"2025-08-19T20:15:30.757Z","modified":"2026-06-17T09:07:59.39Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-497"],"updated_at":"2026-11-02T14:11:24.730342Z"}]}}