IBM DataPower Gateways vulnerabilities

CVEs per yearBy the year they were published

1. 20188
2. 20182

Newest CVEs

• CVE-2018-1677

  IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of…

  IBM · DataPower Gateways

  Medium5.1
• CVE-2018-1661

  IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…

  IBM · DataPower Gateways

  Medium6.5
• CVE-2018-1667

  IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 is…

  IBM · DataPower Gateways

  Medium5.4
• CVE-2018-1652

  IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and…

  IBM · DataPower Gateways

  Medium6.2
• CVE-2018-1663

  IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly…

  IBM · DataPower Gateways

  Medium5.9
• CVE-2018-1669

  IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM…

  IBM · DataPower Gateways

  High7.1
• CVE-2018-1664

  IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM…

  IBM · DataPower Gateway CD

  Medium6.2
• CVE-2018-1421

  IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.…

  IBM · DataPower Gateways

  High7.1
• CVE-2017-1773

  IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning…

  IBM · DataPower Gateways

  Medium4.0
• CVE-2017-1591

  IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…

  IBM · DataPower Gateways

  Medium6.1