Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
IBM

IBM DataPower Gateway vulnerabilities

26 published CVEs name IBM DataPower Gateway among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2022-40228

    IBM DataPower Gateway session fixation

    IBM · DataPower Gateway

    Low3.7
  • CVE-2022-31773

    IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…

    IBM · DataPower Gateway

    High8.8
  • CVE-2022-32750

    IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting.…

    IBM · DataPower Gateway

    Medium5.4
  • CVE-2022-31776

    IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to server-side request…

    IBM · DataPower Gateway

    Medium6.5
  • CVE-2022-31775

    IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External…

    IBM · DataPower Gateway

    Medium5.5
  • CVE-2022-31774

    IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting.…

    IBM · DataPower Gateway

    Medium5.4
  • CVE-2022-22326

    IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and…

    IBM · DataPower Gateway

    Medium4.0
  • CVE-2021-38944

    IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header injection, caused by…

    IBM · DataPower Gateway

    Medium4.8
  • CVE-2021-38872

    IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service…

    IBM · DataPower Gateway

    Medium5.3
  • CVE-2020-4994

    IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending…

    IBM · DataPower Gateway

    Medium5.3
All 26 in the list