Known vulnerabilities in IBM DataPower Gateway - page 23

Software CPE: cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 564
Public exploits: 26
Known exploited (KEV): 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DataPower Gateway IBM DataPower Gateway is affected by 564 known vulnerabilities: 1 critical, 27 high, 138 medium, 398 low Critical High Medium Low

Vulnerabilities (564)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
10.0.1.14, 10.5.0.6 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342
CWE-326 Medium
No
No
10.0.1.14, 10.5.0.6 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881
CWE-407 Medium
No
No
10.5.0.5 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920
CWE-264 Low
No
No
10.0.1.13, 10.5.0.5 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
10.0.1.12, 10.5.0.4 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
10.0.1.12, 10.0.4.0sr3, 10.5.0.4, 2018.4.1.26 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
10.0.1.12, 10.0.4.0sr3, 10.5.0.4, 2018.4.1.26 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
10.0.1.12, 10.0.4.0sr3, 10.5.0.4, 2018.4.1.26 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU69509 - Insufficient Session Expiration
CVE-2022-40228
CWE-613 Low
No
No
10.0.1.10, 10.0.4.0sr2, 2018.4.1.23 22.11.2022 SB2022112253
#VU68438 - Improper input validation
CVE-2022-21626
CWE-20 Medium
No
No
10.0.1.11, 10.5.0.3, 2018.4.1.24 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256
CWE-444 Medium
No
No
10.0.1.11, 10.5.0.3 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214
CWE-444 Medium
No
No
10.0.1.10, 10.0.4.0sr2, 10.5.0.2 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213
CWE-444 Medium
No
No
10.0.1.10, 10.0.4.0sr2, 10.5.0.2 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166
CWE-200 Low
No
No
10.5.0.3 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012
CWE-401 Medium
No
No
10.5.0.3 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more
#VU63839 - Use of Insufficiently Random Values
CVE-2021-20322
CWE-330 Medium
No
No
10.5.0.3 31.05.2022 SB2022060205
SB2022060206
SB2021121495
and 34 more
#VU63714 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-38944
CWE-444 Medium
No
No
10.0.1.6, 10.0.4.0 26.05.2022 SB2022051848
#VU63668 - Exposure of sensitive information to an unauthorized actor
CVE-2021-45485
CWE-200 Medium
No
No
10.5.0.3 25.05.2022 SB2022022237
SB2022062928
SB2022062931
and 26 more
#VU63577 - Exposure of sensitive information to an unauthorized actor
CVE-2021-45486
CWE-200 Medium
No
No
10.5.0.3 24.05.2022 SB2022062928
SB2022062931
SB2022070643
and 26 more
#VU49150 - Use of Insufficiently Random Values
CVE-2020-25705
CWE-330 Medium
Available
No
10.0.1.11, 10.0.5.0, 2018.4.1.24 17.11.2020 SB2020111734
SB2020122413
SB2021031802
and 24 more


Showing elements 441 - 460 out of 564