VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 20, 2026· Updated Jan 20, 2026

Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

CVE-2025-36115

Description

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Sterling Connect:Express Adaptercpe-rescue2 versions
    cpe:2.3:a:ibm:sterling_connectexpress_adapter_for_sterling_b2b_integrator_520:5.2.0.00:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:sterling_connectexpress_adapter_for_sterling_b2b_integrator_520:5.2.0.00:*:*:*:*:*:*:*range: 5.2.0.00
    • (no CPE)range: >=5.2.0.00 <=5.2.0.12

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.