CVE-2025-36115
Medium · 6.3CVSS
6.3
EPSS
0.2%
Published
Jan 20, 2026
CISA due date
—
The record
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-107226 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-384
- CVE-2026-64857 tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. CWE-384
- CVE-2026-86674 A vulnerability was found in ningzichun Student Management System up to… CWE-384
- CVE-2026-76196 Photoshop Mobile is affected by a Session Fixation vulnerability that could result in… CWE-384
- CVE-2026-86279 A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management &… CWE-384
- CVE-2026-85238 MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom… CWE-384
- CVE-2026-84652 In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the… CWE-384
- CVE-2026-18527 IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i… CWE-384