Known vulnerabilities in IBM DataPower Gateway
Vendor:
IBM Corporation
Software:
IBM DataPower Gateway
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
564
Public exploits:
26
Known exploited (KEV):
10
Breakdown by Severity Chart
10.5.0.23
10.6.0.11
11.0.0.3
11.0.0.1
11.0.0.2
10.6.0.10
10.5.0.22
11.0.0.0
10.6.0.9
10.5.0.21
10.6.6.0
10.5.0.20
10.6.0.8
10.6.5.0
10.5.0.19
10.6.0.7
10.5.0.18
10.6.0.6
10.6.3.0
10.6.2.0
10.6.1.0
10.6.4.0
10.5.0.17
10.6.0.5
10.6.3
10.5.0.16
10.6.0.4
10.6.2
10.6.0.3
10.5.0.15
10.6.0.2
10.5.0.14
10.6.1
10.6.0.1
10.5.0.13
10.5.0.12
10.5.1.0
10.6.0.0
10.5.0.11
10.0.1.19
10.5.4
10.0.1.18
10.5.0.10
10.5.0.9
10.0.1.17
10.5.2
10.5.1
10.5.3
10.5.0.8
10.0.1.16
10.0.1.15
10.5.0.7
10.5.0.6
10.0.1.14
10.0.1.13
10.0.4.0sr3
2018.4.1.26
10.5.0.5
10.5.0.4
10.0.1.12
10.5.0.3
2018.4.1.24
10.0.1.11
10.5.0.2
10.0.4.0sr2
10.0.1.10
10.0.1.9
2018.4.1.23
2018.4.1.22
2018.4.1.19
10.5.0.1
2018.4.1.21
10.0.1.8
10.0.1.6sr1
10.0.5.0
10.5.0.0
10.0.4.0sr1
10.0.1.7
2018.4.1.20
10.0.1.4
10.0.1.3
10.0.1.2
10.0.1.1
2018.4.1.18
2018.4.1.17
2018.4.1.16
2018.4.1.15
2018.4.1.14
2018.4.1.13
2018.4.1.12
2018.4.1.11
2018.4.1.10
2018.4.1.9
2018.4.1.8
2018.4.1.7
2018.4.1.6
2018.4.1.5
2018.4.1.4
2018.4.1.3
2018.4.1.2
2018.4.1.1
2018.4.1.0
10.0.1.0
10.0.1.6
10.0.1.5
10.0.3.0
10.0.2.0
10.0.4.4
10.0.4.3
10.0.4.2
10.0.4.1
10.0.4.0
7.2.0.16
7.2.0.15
7.2.0.14
7.2.0.13
7.2.0.12
7.2.0.11
7.2.0.10
7.2.0.9
7.2.0.8
7.2.0.7
7.2.0.6
7.2.0.5
7.2.0.4
7.2.0.3
7.2.0.2
7.2.0.1
7.2.0.0
7.1.0.19
7.1.0.18
7.1.0.17
7.1.0.16
7.1.0.15
7.1.0.14
7.1.0.13
7.1.0.12
7.1.0.11
7.1.0.10
7.1.0.9
7.1.0.8
7.1.0.7
7.1.0.6
7.1.0.5
7.1.0.4
7.1.0.3
7.1.0.2
7.1.0.1
7.1.0.0
7.7.1.3
7.7.1.2
7.7.1.1
7.7.1.0
7.7.0.0
7.5.0.18
7.5.0.17
7.5.0.16
7.5.0.15
7.5.0.14
7.5.0.13
7.5.0.12
7.5.0.11
7.5.0.10
7.5.0.9
7.5.0.8
7.5.0.7
7.5.0.6
7.5.0.5
7.5.0.4
7.5.0.3
7.5.0.2
7.5.0.1
7.5.0.0
7.5.1.17
7.5.1.16
7.5.1.15
7.5.1.14
7.5.1.13
7.5.1.12
7.5.1.11
7.5.1.10
7.5.1.9
7.5.1.8
7.5.1.7
7.5.1.6
7.5.1.5
7.5.1.4
7.5.1.3
7.5.1.2
7.5.1.1
7.5.1.0
7.5.2.17
7.5.2.16
7.5.2.15
7.5.2.14
7.5.2.13
7.5.2.12
7.5.2.11
7.5.2.10
7.5.2.9
7.5.2.8
7.5.2.7
7.5.2.6
7.5.2.5
7.5.2.4
7.5.2.3
7.5.2.2
7.5.2.1
7.5.2.0
7.6.0.10
7.6.0.9
7.6.0.8
7.6.0.7
7.6.0.6
7.6.0.5
7.6.0.4
7.6.0.3
7.6.0.2
7.6.0.1
7.6.0.0
7.7
7.2
7.1
7.6
7.5.2
7.5.1
7.5
Vulnerabilities (564)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU148984 - Reachable Assertion CVE-2026-4046 |
CWE-617 | Medium | 10.5.0.23, 10.6.0.11 | 11.09.2026 |
SB2026091126 SB2026091132 SB2026091133 and 13 more |
||
| #VU145138 - XML Injection CVE-2026-83616 |
CWE-91 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 25.08.2026 |
SB2026082538 SB2026092932 SB2026100816 |
||
| #VU145137 - Allocation of Resources Without Limits or Throttling CVE-2026-83615 |
CWE-770 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 25.08.2026 |
SB2026082538 SB2026092932 SB2026100816 |
||
| #VU145135 - Inefficient Regular Expression Complexity CVE-2026-83619 |
CWE-1333 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 25.08.2026 |
SB2026082538 SB2026092932 SB2026100816 |
||
| #VU145134 - Inefficient Algorithmic Complexity CVE-2026-83613 |
CWE-407 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 25.08.2026 |
SB2026082538 SB2026092932 SB2026100816 |
||
| #VU145133 - Inefficient Algorithmic Complexity CVE-2026-83614 |
CWE-407 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 25.08.2026 |
SB2026082538 SB2026092932 SB2026100816 |
||
| #VU145132 - XML Injection CVE-2026-83608 |
CWE-91 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 25.08.2026 |
SB2026082538 SB2026092932 SB2026100816 |
||
| #VU142549 - XML Injection CVE-2026-83607 |
CWE-91 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 14.08.2026 |
SB20260814121 SB2026092932 SB2026100816 |
||
| #VU142548 - XML Injection CVE-2026-83605 |
CWE-91 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 14.08.2026 |
SB20260814121 SB2026092932 SB2026100816 |
||
| #VU128578 - Out-of-bounds write CVE-2026-42015 |
CWE-787 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 21 more |
||
| #VU128577 - Out-of-bounds read CVE-2026-5260 |
CWE-125 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 22 more |
||
| #VU128575 - Improper Certificate Validation CVE-2026-42013 |
CWE-295 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 22 more |
||
| #VU128574 - Improper Certificate Validation CVE-2026-42012 |
CWE-295 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026052063 SB2026052087 and 18 more |
||
| #VU128573 - Improper Certificate Validation CVE-2026-42011 |
CWE-295 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026052063 SB2026052087 and 16 more |
||
| #VU128572 - Improper Certificate Validation CVE-2026-3833 |
CWE-295 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 20 more |
||
| #VU128571 - Improper Authentication CVE-2026-42010 |
CWE-287 | High | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 22 more |
||
| #VU128570 - Heap-based Buffer Overflow CVE-2026-33845 |
CWE-122 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB20260509148 SB2026052063 and 16 more |
||
| #VU128569 - Always-Incorrect Control Flow Implementation CVE-2026-42009 |
CWE-670 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 25 more |
||
| #VU128568 - Heap-based Buffer Overflow CVE-2026-33846 |
CWE-122 | Medium | 10.5.0.23, 10.6.0.11 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 21 more |
||
| #VU118665 - Use After Free CVE-2025-61662 |
CWE-416 | Low | 11.0.0.2 | 21.11.2025 |
SB2025112110 SB2025112111 SB2025112122 and 29 more |
Showing elements 1 - 20 out of 564