Listen to this Post
How the CVE Works:
CVE-2025-1349 is a stored Cross-Site Scripting (XSS) vulnerability in IBM Sterling B2B Integrator and Sterling File Gateway (versions 6.0.0.0–6.1.2.6 and 6.2.0.0–6.2.0.4). A privileged attacker can inject malicious JavaScript into the Web UI, which executes when other users view the compromised component. This allows session hijacking, credential theft, or UI manipulation within trusted sessions. The attack persists due to improper input sanitization, enabling payload storage in backend systems.
DailyCVE Form:
Platform: IBM Sterling
Version: 6.0.0.0–6.2.0.4
Vulnerability: Stored XSS
Severity: Critical
Date: 07/25/2025
Prediction: Patch by Q3 2025
What Undercode Say:
Check vulnerable versions curl -s http://target/version | grep "6.[0-2].0.[0-4]" XSS payload example <script>alert(document.cookie)</script> Mitigation verification grep "input sanitization" /opt/ibm/sterling/config
How Exploit:
1. Authenticate as admin.
2. Inject malicious script via UI input.
3. Trigger execution via victim access.
Protection from this CVE:
1. Apply IBM patch.
2. Enable CSP headers.
3. Sanitize user inputs.
Impact:
- Credential theft.
- Session hijacking.
- UI manipulation.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
