Known vulnerabilities in IBM DataPower Gateway - page 18

Software CPE: cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 430
Public exploits: 19
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DataPower Gateway IBM DataPower Gateway is affected by 430 known vulnerabilities: 1 critical, 23 high, 88 medium, 318 low Critical High Medium Low

Vulnerabilities (430)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93519 - Out-of-bounds read
CVE-2024-37371
CWE-125 Medium
No
No
10.5.0.13, 10.6.0.1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067
CWE-185 Medium
No
No
10.5.0.13, 10.6.0.1 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068
CWE-789 Medium
No
No
10.5.0.13, 10.6.0.1 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU88211 - Resource exhaustion
CVE-2024-2511
CWE-400 Medium
No
No
10.5.0.12, 10.6.0.0 08.04.2024 SB2024040853
SB2024042960
SB2024051069
and 91 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982
CWE-444 Medium
No
No
10.5.0.12, 10.6.0.0 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU88144 - Improper input validation
CVE-2024-28182
CWE-20 Medium
No
No
10.5.0.12, 10.6.0.0 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
10.0.1.19, 10.5.0.11, 10.6.0.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86575 - Integer overflow
CVE-2021-33631
CWE-190 Low
No
No
10.5.0.12, 10.6.0.0 19.02.2024 SB2024021921
SB2024021925
SB2024021926
and 34 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727
CWE-476 Medium
No
No
10.0.1.19, 10.5.0.11, 10.5.4 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85468 - Improper input validation
CVE-2024-20918
CWE-20 Medium
No
No
10.0.1.18, 10.5.0.10, 10.5.4 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952
CWE-20 Medium
No
No
10.0.1.18, 10.5.0.10, 10.5.4 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85471 - Improper input validation
CVE-2024-20921
CWE-20 Medium
No
No
10.0.1.18, 10.5.0.10, 10.5.4 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
10.0.1.19, 10.5.0.11, 10.5.4 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83381 - Memory corruption
CVE-2023-45871
CWE-119 High
No
No
10.5.0.12 21.11.2023 SB2023112172
SB2023112181
SB2023112183
and 94 more
#VU83267 - Improper input validation
CVE-2023-5676
CWE-20 Low
No
No
10.0.1.18, 10.5.0.10, 10.5.4 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82141 - Improper input validation
CVE-2023-22081
CWE-20 Medium
No
No
10.0.1.18, 10.5.0.10, 10.5.4 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU80188 - Cryptographic Issues
CVE-2023-20900
CWE-310 Medium
No
No
10.5.0.12, 10.6.0.0 31.08.2023 SB2023083119
SB2023083154
SB2023083155
and 38 more
#VU77208 - Improper Authentication
CVE-2023-20867
CWE-287 High
No
Exploited
10.0.1.19, 10.5.0.12, 10.6.0.0 13.06.2023 SB2023061339
SB2023061449
SB2023061649
and 34 more
#VU75994 - Use After Free
CVE-2023-2162
CWE-416 Low
No
No
10.5.0.12 10.05.2023 SB2023051048
SB2023051052
SB2023051053
and 101 more
#VU74123 - Memory corruption
CVE-2023-1073
CWE-119 Low
No
No
10.5.0.12 28.03.2023 SB2023032819
SB2023032832
SB20230418189
and 53 more


Showing elements 341 - 360 out of 430