IBM DataPower Gateway
26 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-40228 | 10.0.3.0 – < 10.0.4.0 ; 10.0.1.0 – < 10.0.1.9 ; 2018.4.1.0 – < 2018.4.1.22 ; … | IBM DataPower Gateway session fixation | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-31773 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.2.0 ; … | IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malic | HIGH 8.8 | 0.4 % | ||
| CVE-2022-32750 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.2.0 ; … | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cr | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-31776 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.2.0 ; … | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to se | HIGH 8.8 | 0.6 % | ||
| CVE-2022-31775 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.2.0 ; … | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an | CRITICAL 9.1 | 1.3 % | ||
| CVE-2022-31774 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.2.0 ; … | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cr | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-22326 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.2.0 ; … | IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized view | MEDIUM 4.0 | 0.2 % | ||
| CVE-2021-38944 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.2.0 ; … | IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header i | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-38872 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.1.4 ; … | IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a | HIGH 7.5 | 1.5 % | ||
| CVE-2020-4994 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.1.4 ; … | IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of | HIGH 7.5 | 1.5 % | ||
| CVE-2021-38910 | 2018.4.1.0 ; 10.0.1.0 ; 10.0.2.0 ; … | IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused by the improper vali | MEDIUM 5.3 | 1.1 % | ||
| CVE-2020-4992 | 2018.4.1.0 ; 2018.4.1.16 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an attacker to execute ma | MEDIUM 6.5 | 0.4 % | ||
| CVE-2020-5008 | 2018.4.1.0 ; 10.0.0.0 ; 10.0.1.0 ; … | IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters. T | MEDIUM 5.3 | 0.9 % | ||
| CVE-2020-4831 | 10.0.0.0 ; 10.0.1.0 | IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h | HIGH 7.5 | 0.9 % | ||
| CVE-2020-5014 | 2018.4.1.0 ; 10.0.0.0 ; 10.0.1.1 ; … | IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system usin | MEDIUM 6.7 | 0.9 % | ||
| CVE-2020-4528 | 2018.4.1.0 ; 2018.4.1.12 ; 10.0.0.0 | IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12) could allow a local user, under special conditions, to | MEDIUM 5.9 | 0.3 % | ||
| CVE-2020-4581 | 2018.4.1.0 ; 2018.4.1.12 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a chunked transfe | HIGH 7.5 | 1.6 % | ||
| CVE-2020-4580 | 2018.4.1.0 ; 2018.4.1.12 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially craft | HIGH 7.5 | 1.6 % | ||
| CVE-2020-4579 | 2018.4.1.0 ; 2018.4.1.12 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially craft | HIGH 7.5 | 2.2 % | ||
| CVE-2020-4205 | 2018.4.1.0 ; 2018.4.1.8 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to acces | MEDIUM 6.3 | 0.5 % | ||
| CVE-2020-4203 | 2018.4.1.0 ; 2018.4.1.8 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to impr | MEDIUM 4.9 | 1.3 % | ||
| CVE-2019-4621 | 7.6.0.0 ; 2018.4.1.0 ; 7.6.0.14 ; … | IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a default administrator account that is enabled if the | CRITICAL 9.8 | 1.6 % | ||
| CVE-2019-4294 | 7.6.0.0 ; 2018.4.1.0 ; 2018.4.1.6 ; … | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through | HIGH 8.4 | 0.9 % | ||
| CVE-2018-1666 | 7.6.0.0 ; 7.5.2.0 ; 7.5.1.0 ; … | IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, an | MEDIUM 4.3 | 0.8 % | ||
| CVE-2018-1668 | 7.6.0.0 ; 7.5.2.0 ; 7.5.1.0 ; … | IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances | HIGH 7.5 | 1.4 % | ||
| CVE-2018-1665 | 7.6.0.0 ; 7.6.0.10 ; 7.5.2.0 ; … | IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 th | HIGH 7.5 | 1.0 % |