IBM CVE-2025-14504

IBM has released patched versions addressing this vulnerability; upgrade IBM Sterling B2B Integrator and IBM Sterling File Gateway to versions released after 6.2.2.0 or apply the specific patches identified in the IBM Security Advisory (available through IBM's security portal). For organizations unable to patch immediately, implement network-level mitigations including: restrict Web UI access to trusted administrative IP ranges via firewall rules, enforce network segmentation to limit lateral movement from compromised administrative accounts, implement reverse proxy with strong Content Security Policy headers (frame-ancestors, script-src directives) to limit JavaScript injection impact, enable Web UI session logging and anomaly detection to identify malicious script injection attempts, and strengthen authentication with multi-factor authentication for administrative accounts to raise the bar for authenticated attacks. Additionally, review Web UI access logs for evidence of stored XSS injection attempts using patterns like script tags, event handlers, and JavaScript protocol schemes.