EUVD-2026-12661Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate with low-privilege account
-
DeliveryAccess community management API
-
ExploitView partner associations
-
ExecutionDelete community partners
-
ImpactRemove entire communities
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication required for critical functions
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Authenticated attacker with any user account (PR:L) accessing IBM Sterling B2B Integrator or File Gateway versions 6.1.0.0-6.1.2.7_2, 6.2.0.0-6.2.0.5_1, 6.2.1.0-6.2.1.1_1, or 6.2.2.0. No victim interaction required. Remote network access to affected instances. |
| Impact | This represents a significant real-world risk despite moderate CVSS scoring. The CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N indicates network-accessible attacks with low complexity, requiring low privileges but delivering high integrity impact. The contradiction between 'unauthenticated' in the description and 'PR:L' in the vector suggests attackers may need minimal credentials to exploit, but can then delete critical business relationships and communities without proper authorization. For organizations using Sterling products in production supply chains, unauthorized deletion of trading partners and communities could severely disrupt business operations and B2B transactions. The patch is available from IBM (https://www.ibm.com/support/pages/node/7266518), making this immediately actionable. No KEV listing or EPSS data is provided, suggesting no confirmed active exploitation yet, but the low complexity and high integrity impact make this a priority for Sterling B2B deployments, particularly those exposed to network access by multiple users or partners. |
| Exploit ScenarioDerived | An attacker with minimal or no authentication to an IBM Sterling B2B Integrator portal could exploit the missing authentication checks to access community management functions. By directly accessing vulnerable API endpoints or web interfaces with low-privilege credentials (or potentially bypassing authentication entirely), the attacker could enumerate all trading partners within business communities, view sensitive partner configuration details, delete individual partners to disrupt automated B2B transactions, or delete entire communities to cause widespread operational disruption across the supply chain. Given the low attack complexity (AC:L) and network accessibility (AV:N), exploitation could be automated and executed remotely without specialized tools or knowledge. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 17, 2026
IBM Sterling B2B Integrator and IBM Sterling File Gateway contain an authentication bypass vulnerability that allows remote unauthenticated attackers to view and delete business partners within communities, as well as delete entire communities. Multiple versions are affected including 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0. While the CVSS score is 7.1 (High), the vulnerability requires low attack complexity and no user interaction, making it straightforward to exploit over the network with low privileges.
RemediationAI
Apply the security patches provided by IBM immediately by consulting the vendor advisory at https://www.ibm.com/support/pages/node/7266518 for specific patch versions corresponding to each affected version range. Organizations should upgrade to the patched versions as specified in the IBM support page, which will address the missing authentication checks for community and partner management functions. As an interim mitigation until patching is completed, implement network segmentation to restrict access to Sterling B2B Integrator and File Gateway management interfaces to authorized administrator IP addresses only, enforce multi-factor authentication for all user accounts, and enable comprehensive audit logging to detect any unauthorized attempts to view or delete partner or community configurations. Monitor logs for suspicious activity targeting community management endpoints and review existing partner and community configurations to ensure integrity has not been compromised.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability affects IBM Sterling B2B Integrator and Sterling File Gateway (CPE: cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*), enterprise-grade solutions for secure file transfer and B2B transaction processing. The root cause is CWE-306 (Missing Authentication for Critical Function), meaning certain administrative or management functions that control community partner relationships lack proper authentication checks. Sterling B2B Integrator is used by enterprises to orchestrate complex supply chain transactions and electronic data interchange (EDI), making partner and community management critical security boundaries. The CVSS vector indicates Low Privileges Required (PR:L), which contradicts the description stating 'unauthenticated attacker' - this discrepancy suggests the vulnerability may allow privilege escalation from minimal authenticated access to perform administrative functions without proper authorization checks.
Know when Sterling B2b Integrator gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partners of a community and to delete the communities.
Executive ViewAI
IBM Sterling B2B Integrator and File Gateway installations are vulnerable to unauthorized access allowing attackers to view, delete partner relationships, and remove entire communities without authentication. This threatens supply chain visibility, operational continuity, and data integrity for organizations relying on these platforms for critical B2B transactions.
Apply vendor patch. If immediate patching is not possible: implement network-level access controls restricting Sterling administrative interfaces to trusted networks only, deploy WAF rules blocking unauthenticated requests to community/partner management endpoints, and disable remote access to these systems until patches are applied.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
More in Sterling B2b Integrator
View allIBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. Rated critical seve
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. Rated critical seve
Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-s
IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. Rated medium sev
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. Rated high severity (CVSS 8.8), this vu
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. Rated high severity (CVSS 8.8), this vu
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which c
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenti
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL in
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection. Rated high severity
GitHub PoC
Exploit-DB