What is the CVSS score of EUVD-2025-210543?

EUVD-2025-210543 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2025-210543?

Yes, a patch is available for EUVD-2025-210543. Update the affected software to the latest version immediately.

IBM Sterling B2B Integrator EUVD-2025-210543

| CVE-2025-36431 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-07-30 ibm

GHSA-3g3v-4g9j-fq2m

IBM XSS Sterling B2b Integrator Sterling File Gateway

5.4

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

vuln.today AI

5.4 MEDIUM

Network-delivered XSS requiring low-privilege auth and victim page-load; scope changes to victim's browser context enabling credential disclosure.

3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 30, 2026 - 15:35 vuln.today

DescriptionCVE.org

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

AnalysisAI

Cross-site scripting in IBM Sterling B2B Integrator and Sterling File Gateway 6.2.2.0-6.2.2.0_1 enables any authenticated low-privilege user to inject persistent JavaScript into the Web UI, which executes within the browser session of other authenticated users who load the affected page. The changed scope (S:C in CVSS) reflects that the injected script runs in the victim's browser context rather than the originating user's, enabling credential harvesting or session token theft within the trusted application session. No public exploit code or CISA KEV listing exists at time of analysis; IBM has issued a patch.

Technical ContextAI

IBM Sterling B2B Integrator (CPE: cpe:2.3:a:ibm:sterling_b2b_integrator) and its companion Sterling File Gateway (CPE: cpe:2.3:a:ibm:sterling_file_gateway) are enterprise B2B integration platforms used for EDI, file transfer, and supply-chain data exchange. Both expose a browser-based Web UI for administration and trading-partner management. CWE-79 (Improper Neutralization of Input During Web Page Generation) describes the root cause: one or more Web UI input fields accept user-supplied data that is rendered without sufficient output encoding into HTML or JavaScript contexts. This allows an attacker-controlled string to break out of its intended data context and become executable script content in any user's browser that subsequently loads the affected page.

RemediationAI

Apply the vendor-released patch documented in IBM Security Bulletin at https://www.ibm.com/support/pages/node/7280647; the bulletin specifies the exact fix version and iFix. Until patching is complete, limit Web UI access to trusted networks and enforce the principle of least privilege - remove or restrict low-privilege user accounts that do not require Web UI access, reducing the pool of potential attackers. Enabling strict Content Security Policy (CSP) headers at the reverse proxy or load-balancer layer in front of the Sterling Web UI would block inline script execution and significantly reduce exploitability as a compensating control; however, broad CSP may break existing UI functionality and should be tested carefully. Session-based monitoring for anomalous credential use or unexpected API calls can serve as a detection control if patching is delayed.