Known vulnerabilities in IBM DataPower Gateway - page 19

Software CPE: cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 430
Public exploits: 19
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DataPower Gateway IBM DataPower Gateway is affected by 430 known vulnerabilities: 1 critical, 23 high, 88 medium, 318 low Critical High Medium Low

Vulnerabilities (430)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86721 - Improper input validation
CVE-2024-22019
CWE-20 Medium
No
No
10.0.1.18, 10.5.0.10, 10.5.4 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU85352 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-46177
CWE-22 Medium
No
No
10.5.0.8, 10.5.3 15.01.2024 SB2024011501
SB2024011520
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
10.0.1.18, 10.5.0.10, 10.5.4 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82583 - Observable discrepancy
CVE-2023-33850
CWE-203 Medium
No
No
10.0.1.18, 10.5.0.10, 10.5.4 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82200 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-45145
CWE-362 Low
No
No
10.0.1.17, 10.5.0.9, 10.5.3 18.10.2023 SB2023101841
SB2023101848
SB2023101849
and 30 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
10.0.1.16, 10.5.0.8 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
10.0.1.16, 10.5.0.8 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU80565 - Improper input validation
CVE-2023-4807
CWE-20 Low
No
No
10.0.1.16, 10.5.0.8, 10.5.3 08.09.2023 SB2023090834
SB2023092109
SB2023110126
and 45 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883
CWE-185 Medium
No
No
10.0.1.15, 10.5.0.2, 10.5.0.7 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590
CWE-1068 Medium
No
No
10.0.1.15, 10.5.0.2, 10.5.0.7 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589
CWE-444 Medium
No
No
10.0.1.15, 10.5.0.2, 10.5.0.7 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77604 - Improper input validation
CVE-2023-30588
CWE-20 Medium
No
No
10.0.1.15, 10.5.0.2, 10.5.0.7 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
10.0.1.14, 10.5.0.6 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342
CWE-326 Medium
No
No
10.0.1.14, 10.5.0.6 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU75264 - Improper input validation
CVE-2023-21939
CWE-20 Medium
Available
No
10.0.1.14, 10.5.0.6 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75266 - Improper input validation
CVE-2023-21968
CWE-20 Low
No
No
10.0.1.14, 10.5.0.6 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75260 - Improper input validation
CVE-2023-21930
CWE-20 Medium
No
No
10.0.1.14, 10.5.0.6 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967
CWE-20 Medium
No
No
10.0.1.14, 10.5.0.6 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920
CWE-264 Low
No
No
10.0.1.13, 10.5.0.5 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
10.0.1.12, 10.0.4.0sr3, 10.5.0.4, 2018.4.1.26 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more


Showing elements 361 - 380 out of 430