Known vulnerabilities in IBM Application Gateway

Vendor: IBM Corporation
Software: IBM Application Gateway
Software CPE: cpe:2.3:a:ibm_corporation:ibm_application_gateway:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Application Gateway IBM Application Gateway is affected by 15 known vulnerabilities: 1 high, 9 medium, 5 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110086 - Incorrect Permission Assignment for Critical Resource
CVE-2024-45655		 CWE-732 Low
No
No
 24.12.0 03.06.2025 SB2025060311
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 - 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 24.09 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 24.12.0 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88483 - Security Features
CVE-2024-2756		 CWE-254 Low
No
No
 24.09 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 24 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 24.09 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU88121 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-28787		 CWE-444 High
No
No
 24.03.1 04.04.2024 SB2024040417
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 24.09 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87339 - Information Exposure Through Timing Discrepancy
CVE-2024-2236		 CWE-208 Medium
No
No
 24.09 11.03.2024 SB2024031137
SB2024031141
SB2024111242
and 58 more
#VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2023-52426		 CWE-776 Medium
No
No
 - 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 22 more
#VU86230 - Resource exhaustion
CVE-2023-52425		 CWE-400 Medium
No
No
 - 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 118 more
#VU85268 - Cross-Site Request Forgery (CSRF)
CVE-2023-5455		 CWE-352 Medium
No
No
 24.12.0 10.01.2024 SB2024011032
SB2024011039
SB2024011040
and 17 more
#VU67756 - Security Features
CVE-2022-31629		 CWE-254 Low
Available
No
 24.09 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 49 more
#VU67713 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22387		 CWE-79 Low
No
No
 22.07 28.09.2022 SB2022092814
#VU48269 - Security Features
CVE-2020-17049		 CWE-254 Low
No
No
 24.09 10.11.2020 SB2020111029
SB2021111015
SB2022121006
and 18 more