Known vulnerabilities in IBM DataPower Gateway - page 25

Software CPE: cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 564
Public exploits: 26
Known exploited (KEV): 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DataPower Gateway IBM DataPower Gateway is affected by 564 known vulnerabilities: 1 critical, 27 high, 138 medium, 398 low Critical High Medium Low

Vulnerabilities (564)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132211 - Improper control of a resource through its lifetime
CVE-2026-46300
CWE-664 Low
Available
Exploited
11.0.0.3 24.05.2026 SB2026052402
SB2026052403
SB2026052404
and 69 more
#VU131583 - Improper Access Control
CVE-2026-46333
CWE-284 Low
Available
Exploited
11.0.0.3 15.05.2026 SB20260515105
SB20260515109
SB20260515110
and 75 more
#VU130854 - Memory corruption
CVE-2026-43329
CWE-119 Medium
No
No
11.0.0.3 09.05.2026 SB2026050962
SB2026053002
SB2026060166
and 55 more
#VU130763 - Resource Management Errors
CVE-2026-43284
CWE-399 High
Available
Exploited
11.0.0.3 08.05.2026 SB20260508111
SB20260508120
SB20260508121
and 75 more
#VU130570 - Use After Free
CVE-2026-43163
CWE-416 Low
No
No
11.0.0.3 07.05.2026 SB20260507181
SB2026052701
SB20260528263
and 40 more
#VU128879 - Out-of-bounds read
CVE-2026-43038
CWE-125 Medium
No
No
11.0.0.3 02.05.2026 SB2026050230
SB2026051411
SB2026060229
and 76 more
#VU127796 - Heap-based Buffer Overflow
CVE-2026-31607
CWE-122 Medium
No
No
11.0.0.3 25.04.2026 SB20260425114
SB20260513116
SB2026052679
and 54 more
#VU127658 - Use After Free
CVE-2026-31488
CWE-416 Low
No
No
11.0.0.3 24.04.2026 SB20260424227
SB20260513116
SB2026060229
and 23 more
#VU127616 - Use After Free
CVE-2026-31532
CWE-416 Low
No
No
11.0.0.3 24.04.2026 SB20260424185
SB2026050637
SB2026050693
and 50 more
#VU120053 - NULL Pointer Dereference
CVE-2025-68214
CWE-476 Low
No
No
11.0.0.3 16.12.2025 SB2025121696
SB2026032753
SB2026032754
and 33 more
#VU115516 - Error Handling
CVE-2025-39797
CWE-388 Low
No
No
11.0.0.3 16.09.2025 SB20250916256
SB20251015148
SB20251015149
and 34 more
#VU54624 - Out-of-bounds read
CVE-2021-22918
CWE-125 Medium
No
No
10.0.1.5, 10.0.4.0 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more
#VU26149 - Integer overflow
CVE-2020-10531
CWE-190 High
No
No
10.0.1.5, 10.0.4.0, 2018.4.1.18 17.03.2020 SB2020031801
SB2020031802
SB2020031803
and 40 more
#VU16640 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1667
CWE-79 Low
No
No
- 20.12.2018 SB2018122012
#VU16638 - Improper input validation
CVE-2018-1677
CWE-20 Low
No
No
- 20.12.2018 SB2018122012
#VU16636 - Cross-Site Request Forgery (CSRF)
CVE-2018-1661
CWE-352 Low
No
No
- 20.12.2018 SB2018122012
#VU16639 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1665
CWE-200 Low
No
No
- 13.12.2018 SB2018122012
#VU16642 - Permissions, Privileges, and Access Controls
CVE-2018-1652
CWE-264 Low
No
No
- 11.12.2018 SB2018122012
#VU16641 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-1663
CWE-300 Low
No
No
- 07.12.2018 SB2018122012
#VU13054 - Double Free
CVE-2017-14952
CWE-415 High
No
No
10.0.1.5, 10.0.4.0, 2018.4.1.18 30.05.2018 SB2018052513
SB2017102307
SB2017102308
and 6 more


Showing elements 481 - 500 out of 564