{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-7253","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","state":"PUBLISHED","assignerShortName":"ibm","dateReserved":"2026-04-27T22:02:11.814Z","datePublished":"2026-06-22T15:21:25.434Z","dateUpdated":"2026-07-23T13:51:40.526Z"},"containers":{"cna":{"providerMetadata":{"orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm","dateUpdated":"2026-07-23T13:51:40.526Z"},"title":"IBM Sterling File Gateway SQL Injection","datePublic":"2026-07-22T18:23:00.000Z","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-89","description":"CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection')","type":"CWE"}]}],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator","versions":[{"status":"affected","version":"6.2.1.0","lessThanOrEqual":"6.2.1.1_2","versionType":"semver"},{"status":"affected","version":"6.2.2.0","lessThanOrEqual":"6.2.2.0_1","versionType":"semver"}],"defaultStatus":"unaffected"},{"vendor":"IBM","product":"Sterling File Gateway","versions":[{"status":"affected","version":"6.2.1.0","lessThanOrEqual":"6.2.1.1_2","versionType":"semver"},{"status":"affected","version":"6.2.2.0","lessThanOrEqual":"6.2.2.0_1","versionType":"semver"}],"defaultStatus":"unaffected"}],"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1.0","versionEndIncluding":"6.2.1.1_2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.2.0","versionEndIncluding":"6.2.2.0_1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1.0","versionEndIncluding":"6.2.1.1_2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.2.0","versionEndIncluding":"6.2.2.0_1"}]}]}],"descriptions":[{"lang":"en","value":"IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.","supportingMedia":[{"type":"text/html","base64":false,"value":"

IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7280923","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"LOW","baseSeverity":"MEDIUM","baseScore":6,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L"}}],"solutions":[{"lang":"en","value":"Product\nVersion\nAPAR\nRemediation & Fix\n\n\nIBM Sterling B2B Integrator and IBM Sterling File Gateway\n6.2.1.0 - 6.2.1.1_2\n IT49319    \nApply B2Bi 6.2.1.2, 6.2.2.1\n\n\nIBM Sterling B2B Integrator and IBM Sterling File Gateway\n6.2.2.0 - 6.2.2.0_1  \n IT49319    \nApply B2Bi 6.2.2.1\n\n\n\n\n\n The IIM versions of 6.2.1.2 and 6.2.2.1 are available on Fix Central http://www-933.ibm.com/support/fixcentral/swg/selectFixes . \n\n\n\n\nThe container version of 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.","supportingMedia":[{"type":"text/html","base64":false,"value":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
ProductVersionAPARRemediation & Fix
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT49319    Apply B2Bi 6.2.1.2, 6.2.2.1
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1   IT49319    Apply B2Bi 6.2.2.1
\n

 The IIM versions of 6.2.1.2 and 6.2.2.1 are available on Fix Central. 

\n

The container version of 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.

"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-23T13:43:05.352436Z","id":"CVE-2026-7253","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-23T13:43:20.332Z"}}]}}