CVE-2025-36115mediumCWE-384

CVE-2025-36115: medium-severity vulnerability in IBM Sterling Connect:Express Adapter for…

Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

Published

Follow this CVE+ Monitor Sterling Connect:Express Adapter for Sterling B2B Integrator

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 0.2%
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
IBM · Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0
Related CVEs — IBM Sterling Connect:Express Adapter for…

In the same product, most dangerous first.

CVE-2025-36066MEDIUMMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.EPSS 0.2%CVE-2025-36065MEDIUMMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.EPSS 0.2%CVE-2025-36113MEDIUMMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.EPSS 0.2%CVE-2025-36063MEDIUMMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.EPSS 0.2%