Known vulnerabilities in IBM DataPower Gateway - page 22

Software CPE: cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 430
Public exploits: 19
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DataPower Gateway IBM DataPower Gateway is affected by 430 known vulnerabilities: 1 critical, 23 high, 88 medium, 318 low Critical High Medium Low

Vulnerabilities (430)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107947 - Resource exhaustion
CVE-2020-4994
CWE-400 High
No
No
- 25.04.2025 SB2022051756
#VU107945 - Resource exhaustion
CVE-2021-38872
CWE-400 High
No
No
- 25.04.2025 SB2022051755
#VU57036 - Heap-based Buffer Overflow
CVE-2021-32626
CWE-122 Medium
No
No
10.0.1.6, 10.0.4.0, 2018.4.1.19 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 24 more
#VU57034 - Improper input validation
CVE-2021-32675
CWE-20 Medium
No
No
10.0.1.6, 10.0.4.0, 2018.4.1.19 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 24 more
#VU16640 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1667
CWE-79 Low
No
No
- 20.12.2018 SB2018122012
#VU16638 - Improper input validation
CVE-2018-1677
CWE-20 Low
No
No
- 20.12.2018 SB2018122012
#VU16636 - Cross-Site Request Forgery (CSRF)
CVE-2018-1661
CWE-352 Low
No
No
- 20.12.2018 SB2018122012
#VU16639 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1665
CWE-200 Low
No
No
- 13.12.2018 SB2018122012
#VU16642 - Permissions, Privileges, and Access Controls
CVE-2018-1652
CWE-264 Low
No
No
- 11.12.2018 SB2018122012
#VU16641 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-1663
CWE-300 Low
No
No
- 07.12.2018 SB2018122012


Showing elements 421 - 440 out of 430