The vulnerable Ebics server component in IBM Sterling B2B Integrator and IBM Sterling File Gateway allows an authenticated user to embed arbitrary JavaScript into the web interface. This cross‑site scripting flaw, identified as CWE‑79, can alter intended functionality and potentially expose credentials stored in the user session.

Affected products include IBM Sterling B2B Integrator versions 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1, as well as IBM Sterling File Gateway covering the same ranges.

The CVSS score of 5.4 indicates a moderate severity. The EPSS score of 0.00162, a value well below 1%, indicates a very low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited widespread exploitation. Attack requires authentication to the web UI; an attacker with valid credentials could inject the malicious script, so the risk is confined to environments where privileged access is compromised. Regular monitoring of user activity and enforcing least privilege can help mitigate exploitation until a patch is applied.