IBM DataPower Gateway vulnerabilities
26 published CVEs name IBM DataPower Gateway among the affected products.
- Published CVEs
- 26
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 6Medium 17Low 3Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20194
- 20206
- 20214
- 202211
Newest CVEs
- CVE-2022-40228
IBM DataPower Gateway session fixation
IBM · DataPower Gateway
Low3.7 - CVE-2022-31773
IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
IBM · DataPower Gateway
High8.8 - CVE-2022-32750
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting.…
IBM · DataPower Gateway
Medium5.4 - CVE-2022-31776
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to server-side request…
IBM · DataPower Gateway
Medium6.5 - CVE-2022-31775
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External…
IBM · DataPower Gateway
Medium5.5 - CVE-2022-31774
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting.…
IBM · DataPower Gateway
Medium5.4 - CVE-2022-22326
IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and…
IBM · DataPower Gateway
Medium4.0 - CVE-2021-38944
IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header injection, caused by…
IBM · DataPower Gateway
Medium4.8 - CVE-2021-38872
IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service…
IBM · DataPower Gateway
Medium5.3 - CVE-2020-4994
IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending…
IBM · DataPower Gateway
Medium5.3