CVE-2025-14483

Received Received - Intake

Information Disclosure Vulnerability in IBM Sterling B2B Integrator

Publication date: 2026-03-13

Last updated on: 2026-03-20

Assigner: IBM Corporation

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could disclose sensitive host information to authenticated users in responses that could be used in further attacks against the system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-13

Last Modified

2026-03-20

Generated

2026-07-06

AI Q&A

2026-03-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-14483

EUVD

EUVD-2025-208662

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	sterling_b2b_integrator	From 6.1.0.0 (inc) to 6.1.2.8 (exc)
ibm	sterling_file_gateway	From 6.1.0.0 (inc) to 6.1.2.8 (exc)
ibm	sterling_b2b_integrator	From 6.2.0.0 (inc) to 6.2.0.5_2 (exc)
ibm	sterling_b2b_integrator	From 6.2.1.0 (inc) to 6.2.1.1_2 (exc)
ibm	sterling_b2b_integrator	6.2.2.0
ibm	sterling_file_gateway	From 6.2.0.0 (inc) to 6.2.0.5_2 (exc)
ibm	sterling_file_gateway	From 6.2.1.0 (inc) to 6.2.1.1_2 (exc)
ibm	sterling_file_gateway	6.2.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-201	The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Attack-Flow Graph

Executive Summary

This vulnerability, identified as CVE-2025-14483, affects IBM Sterling B2B Integrator and IBM Sterling File Gateway. It allows authenticated users to obtain sensitive host information through system responses. This information disclosure could be exploited in subsequent attacks against the system.

The issue is classified under CWE-201 (Insertion of Sensitive Information Into Sent Data) and has a CVSS v3.1 base score of 4.3, indicating a network attack vector with low attack complexity, requiring low privileges, no user interaction, and resulting in low confidentiality impact without affecting integrity or availability.

Impact Analysis

The vulnerability can impact you by allowing authenticated users to access sensitive host information that should not be disclosed. This information leakage can be used by attackers to plan and execute further attacks against your system.

Although the confidentiality impact is rated as low, the disclosed information could still aid attackers in compromising the system or escalating their privileges.

Compliance Impact

I don't know

Detection Guidance

There are no specific detection commands or methods provided to identify this vulnerability on your network or system.

Mitigation Strategies

Immediate mitigation involves applying the APAR IT48832 and upgrading affected IBM Sterling B2B Integrator and IBM Sterling File Gateway versions to the fixed versions.

For versions 6.1.0.0 through 6.1.2.7_2: upgrade to 6.1.2.8, 6.2.0.5_2, 6.2.1.1_2, or 6.2.2.0_1.
For versions 6.2.0.0 through 6.2.0.5_1: upgrade to 6.2.0.5_2, 6.2.1.1_2, or 6.2.2.0_1.
For versions 6.2.1.0 through 6.2.1.1_1: upgrade to 6.2.1.1_2 or 6.2.2.0_1.
For version 6.2.2.0: upgrade to 6.2.2.0_1.

No workarounds or alternative mitigations are provided, so upgrading is the recommended course of action.

Hi! I’m here to help you understand CVE-2025-14483. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70