CVE-2025-36115mediumCWE-384

CVE-2025-36115: falha de média gravidade em IBM Sterling Connect:Express Adapter for…

Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

Publicada em

Seguir esta CVE+ Monitorar Sterling Connect:Express Adapter for Sterling B2B Integrator

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.2%
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
IBM · Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0
CVEs relacionadas — IBM Sterling Connect:Express Adapter for…

No mesmo produto, das mais perigosas para as menos.

CVE-2025-36066MEDIUMMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.EPSS 0.2%CVE-2025-36065MEDIUMMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.EPSS 0.2%CVE-2025-36113MEDIUMMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.EPSS 0.2%CVE-2025-36063MEDIUMMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.EPSS 0.2%