CVE-2025-36115CWE-384

Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

Medium · published January 20, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00161 · 4.9th percentile
Weakness
CWE-384 · Session Fixation
Published
2026-01-20T15:18Z
EPSS history
Timeline
  • 20 JAN 15:18Z
    Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
    cvelistv5