IBM DataPower Gateways
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-1677 | 7.1 ; 7.2 ; 7.5 ; … | IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the i | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-1661 | 7.5 ; 7.5.1 ; 7.5.2 ; … | IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malic | HIGH 8.8 | 0.9 % | ||
| CVE-2018-1667 | 7.5.0.0 ; 7.5.1.0 ; 7.6.0.0 ; … | IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 th | MEDIUM 5.4 | 0.7 % | ||
| CVE-2018-1652 | 7.1.0.0 ; 7.2.0.0 ; 7.5.0.0 ; … | IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through | MEDIUM 6.2 | 0.4 % | ||
| CVE-2018-1663 | 7.5 ; 7.5.1 ; 7.5.2 ; … | IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failu | MEDIUM 5.9 | 2.3 % | ||
| CVE-2018-1669 | 7.1.0.0 ; 7.1.0.23 ; 7.2.0.0 ; … | IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6. | HIGH 7.1 | 1.9 % | ||
| CVE-2018-1664 | 7.1.0.0 ; 7.1.0.23 ; 7.2.0.0 ; … | IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6. | HIGH 7.8 | 0.4 % | ||
| CVE-2018-1421 | 7.1 ; 7.2 ; 7.5 ; … | IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection (XXE) attack when p | HIGH 7.1 | 1.4 % | ||
| CVE-2017-1773 | 7.1 ; 7.2 ; 7.5 ; … | IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform D | MEDIUM 4.0 | 0.3 % | ||
| CVE-2017-1591 | 7.0.0 ; 7.1 ; 7.2 ; … | IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra | MEDIUM 6.1 | 1.0 % |