Known vulnerabilities in IBM DataPower Gateway - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 564
Public exploits: 26
Known exploited (KEV): 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DataPower Gateway IBM DataPower Gateway is affected by 564 known vulnerabilities: 1 critical, 27 high, 138 medium, 398 low Critical High Medium Low

Vulnerabilities (564)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148982 - NULL Pointer Dereference
CVE-2026-2100
CWE-476 Low
No
No
11.0.0.3 11.09.2026 SB2026091125
SB2026091129
SB2026091130
and 1 more
#VU146786 - Uncaught Exception
CVE-2026-82417
CWE-248 Medium
No
No
10.5.0.23, 10.6.0.11, 11.0.0.3 02.09.2026 SB2026090291
SB2026092001
SB2026092002
and 5 more
#VU146785 - Allocation of Resources Without Limits or Throttling
CVE-2026-82562
CWE-770 Low
No
No
10.5.0.23, 10.6.0.11, 11.0.0.3 02.09.2026 SB2026090291
SB2026092001
SB2026092002
and 5 more
#VU146636 - Uncontrolled Recursion
CVE-2026-13757
CWE-674 Low
No
No
11.0.0.3 01.09.2026 SB2026090153
SB2026090154
SB2026090155
and 6 more
#VU145304 - Improper Access Control
CVE-2026-43870
CWE-284 Medium
No
No
10.6.0.11, 11.0.0.3 25.08.2026 SB2026042851
SB2026082613
SB2026100104
#VU145303 - Uncontrolled Memory Allocation
CVE-2026-43868
CWE-789 Medium
No
No
10.6.0.11, 11.0.0.3 25.08.2026 SB2026042851
SB20260825114
SB2026100104
#VU145198 - Out-of-bounds read
CVE-2026-58662
CWE-125 Medium
No
No
10.6.0.11, 11.0.0.3 25.08.2026 SB2026082559
SB2026100104
#VU145194 - Out-of-bounds read
CVE-2026-55970
CWE-125 Medium
No
No
10.6.0.11, 11.0.0.3 25.08.2026 SB2026082559
SB2026082589
SB2026100104
#VU145192 - Inefficient Algorithmic Complexity
CVE-2026-55968
CWE-407 Medium
No
No
10.6.0.11, 11.0.0.3 25.08.2026 SB2026082559
SB2026082589
SB2026090813
and 1 more
#VU145189 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48145
CWE-297 Medium
No
No
10.6.0.11, 11.0.0.3 25.08.2026 SB2026082559
SB2026082589
SB2026100104
#VU145188 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48144
CWE-297 Medium
No
No
10.6.0.11, 11.0.0.3 25.08.2026 SB2026082559
SB2026100104
#VU128580 - Information Exposure Through Timing Discrepancy
CVE-2026-5419
CWE-208 Low
No
No
11.0.0.3 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 7 more
#VU128579 - Improper Certificate Validation
CVE-2026-3832
CWE-295 Medium
No
No
11.0.0.3 30.04.2026 SB2026043071
SB2026052063
SB2026052087
and 7 more
#VU128576 - Use After Free
CVE-2026-42014
CWE-416 Medium
No
No
11.0.0.3 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 21 more
#VU128310 - Mismatched Memory Management Routines
CVE-2025-48431
CWE-762 Medium
No
No
10.6.0.11, 11.0.0.3 28.04.2026 SB2026042851
SB2026100104
#VU128309 - Integer overflow
CVE-2026-41602
CWE-190 Medium
No
No
10.6.0.11, 11.0.0.3 28.04.2026 SB2026042851
SB2026051810
SB2026100104
#VU128305 - Uncontrolled Recursion
CVE-2026-41606
CWE-674 Medium
No
No
10.6.0.11, 11.0.0.3 28.04.2026 SB2026042851
SB2026051810
SB2026100104
#VU128304 - Out-of-bounds read
CVE-2026-41607
CWE-125 Medium
No
No
10.6.0.11, 11.0.0.3 28.04.2026 SB2026042851
SB2026051810
SB2026100104
#VU116185 - Improper Access Control
CVE-2025-41244
CWE-284 High
No
Exploited
11.0.0.2 30.09.2025 SB2025093024
SB2025093025
SB2025093036
and 21 more
#VU109921 - Out-of-bounds read
CVE-2025-5278
CWE-125 Medium
No
No
11.0.0.3 29.05.2025 SB2025052969
SB2025052971
SB2025052972
and 7 more


Showing elements 21 - 40 out of 564