Known vulnerabilities in IBM DataPower Gateway - page 20

Software CPE: cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 430
Public exploits: 19
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DataPower Gateway IBM DataPower Gateway is affected by 430 known vulnerabilities: 1 critical, 23 high, 88 medium, 318 low Critical High Medium Low

Vulnerabilities (430)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82013 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-31775
CWE-611 High
No
No
10.0.1.8, 10.5.0.1, 10.5.1.0, 2018.4.1.21 16.10.2023 SB2023101602
SB2022122219
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881
CWE-407 Medium
No
No
10.5.0.5 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
10.0.1.12, 10.5.0.4 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
10.0.1.12, 10.0.4.0sr3, 10.5.0.4, 2018.4.1.26 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
10.0.1.12, 10.0.4.0sr3, 10.5.0.4, 2018.4.1.26 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU69509 - Insufficient Session Expiration
CVE-2022-40228
CWE-613 Low
No
No
10.0.1.10, 10.0.4.0sr2, 2018.4.1.23 22.11.2022 SB2022112253
#VU68438 - Improper input validation
CVE-2022-21626
CWE-20 Medium
No
No
10.0.1.11, 10.5.0.3, 2018.4.1.24 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256
CWE-444 Medium
No
No
10.0.1.11, 10.5.0.3 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67655 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31774
CWE-79 Medium
No
No
10.5.0.1 26.09.2022 SB2022092639
SB2022092640
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215
CWE-444 Medium
No
No
10.0.1.10, 10.0.4.0sr2, 10.5.0.2 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214
CWE-444 Medium
No
No
10.0.1.10, 10.0.4.0sr2, 10.5.0.2 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213
CWE-444 Medium
No
No
10.0.1.10, 10.0.4.0sr2, 10.5.0.2 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166
CWE-200 Low
No
No
10.5.0.3 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012
CWE-401 Medium
No
No
10.5.0.3 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more
#VU63839 - Use of Insufficiently Random Values
CVE-2021-20322
CWE-330 Medium
No
No
10.5.0.3 31.05.2022 SB2022060205
SB2022060206
SB2021121495
and 34 more
#VU63668 - Exposure of sensitive information to an unauthorized actor
CVE-2021-45485
CWE-200 Medium
No
No
10.5.0.3 25.05.2022 SB2022022237
SB2022062928
SB2022062931
and 26 more
#VU63577 - Exposure of sensitive information to an unauthorized actor
CVE-2021-45486
CWE-200 Medium
No
No
10.5.0.3 24.05.2022 SB2022062928
SB2022062931
SB2022070643
and 26 more
#VU49150 - Use of Insufficiently Random Values
CVE-2020-25705
CWE-330 Medium
Available
No
10.0.1.11, 10.0.5.0, 2018.4.1.24 17.11.2020 SB2020111734
SB2020122413
SB2021031802
and 24 more
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7676
CWE-79 Low
No
No
10.0.1.4, 10.0.3.0, 2018.4.1.17 16.06.2020 SB2020061604
SB2021072628
SB2021072629
and 19 more
#VU23383 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14863
CWE-79 Medium
No
No
10.0.1.4, 10.0.3.0, 2018.4.1.17 04.12.2019 SB2019022306
SB2022090718
SB2023060626
and 6 more


Showing elements 381 - 400 out of 430