CVE-2025-36066 - Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

CVE-2025-36066 - Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

CVE ID : CVE-2025-36066 Published : Jan. 20, 2026, 4:16 p.m. | 35 minutes ago Description : IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Jan. 20, 2026
Affected Product: IBM Sterling