Known vulnerabilities in IBM DataPower Gateway - page 3
Vendor:
IBM Corporation
Software:
IBM DataPower Gateway
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_datapower_gateway:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
564
Public exploits:
26
Known exploited (KEV):
10
Breakdown by Severity Chart
10.5.0.23
10.6.0.11
11.0.0.3
11.0.0.1
11.0.0.2
10.6.0.10
10.5.0.22
11.0.0.0
10.6.0.9
10.5.0.21
10.6.6.0
10.5.0.20
10.6.0.8
10.6.5.0
10.5.0.19
10.6.0.7
10.5.0.18
10.6.0.6
10.6.3.0
10.6.2.0
10.6.1.0
10.6.4.0
10.5.0.17
10.6.0.5
10.6.3
10.5.0.16
10.6.0.4
10.6.2
10.6.0.3
10.5.0.15
10.6.0.2
10.5.0.14
10.6.1
10.6.0.1
10.5.0.13
10.5.0.12
10.5.1.0
10.6.0.0
10.5.0.11
10.0.1.19
10.5.4
10.0.1.18
10.5.0.10
10.5.0.9
10.0.1.17
10.5.2
10.5.1
10.5.3
10.5.0.8
10.0.1.16
10.0.1.15
10.5.0.7
10.5.0.6
10.0.1.14
10.0.1.13
10.0.4.0sr3
2018.4.1.26
10.5.0.5
10.5.0.4
10.0.1.12
10.5.0.3
2018.4.1.24
10.0.1.11
10.5.0.2
10.0.4.0sr2
10.0.1.10
10.0.1.9
2018.4.1.23
2018.4.1.22
2018.4.1.19
10.5.0.1
2018.4.1.21
10.0.1.8
10.0.1.6sr1
10.0.5.0
10.5.0.0
10.0.4.0sr1
10.0.1.7
2018.4.1.20
10.0.1.4
10.0.1.3
10.0.1.2
10.0.1.1
2018.4.1.18
2018.4.1.17
2018.4.1.16
2018.4.1.15
2018.4.1.14
2018.4.1.13
2018.4.1.12
2018.4.1.11
2018.4.1.10
2018.4.1.9
2018.4.1.8
2018.4.1.7
2018.4.1.6
2018.4.1.5
2018.4.1.4
2018.4.1.3
2018.4.1.2
2018.4.1.1
2018.4.1.0
10.0.1.0
10.0.1.6
10.0.1.5
10.0.3.0
10.0.2.0
10.0.4.4
10.0.4.3
10.0.4.2
10.0.4.1
10.0.4.0
7.2.0.16
7.2.0.15
7.2.0.14
7.2.0.13
7.2.0.12
7.2.0.11
7.2.0.10
7.2.0.9
7.2.0.8
7.2.0.7
7.2.0.6
7.2.0.5
7.2.0.4
7.2.0.3
7.2.0.2
7.2.0.1
7.2.0.0
7.1.0.19
7.1.0.18
7.1.0.17
7.1.0.16
7.1.0.15
7.1.0.14
7.1.0.13
7.1.0.12
7.1.0.11
7.1.0.10
7.1.0.9
7.1.0.8
7.1.0.7
7.1.0.6
7.1.0.5
7.1.0.4
7.1.0.3
7.1.0.2
7.1.0.1
7.1.0.0
7.7.1.3
7.7.1.2
7.7.1.1
7.7.1.0
7.7.0.0
7.5.0.18
7.5.0.17
7.5.0.16
7.5.0.15
7.5.0.14
7.5.0.13
7.5.0.12
7.5.0.11
7.5.0.10
7.5.0.9
7.5.0.8
7.5.0.7
7.5.0.6
7.5.0.5
7.5.0.4
7.5.0.3
7.5.0.2
7.5.0.1
7.5.0.0
7.5.1.17
7.5.1.16
7.5.1.15
7.5.1.14
7.5.1.13
7.5.1.12
7.5.1.11
7.5.1.10
7.5.1.9
7.5.1.8
7.5.1.7
7.5.1.6
7.5.1.5
7.5.1.4
7.5.1.3
7.5.1.2
7.5.1.1
7.5.1.0
7.5.2.17
7.5.2.16
7.5.2.15
7.5.2.14
7.5.2.13
7.5.2.12
7.5.2.11
7.5.2.10
7.5.2.9
7.5.2.8
7.5.2.7
7.5.2.6
7.5.2.5
7.5.2.4
7.5.2.3
7.5.2.2
7.5.2.1
7.5.2.0
7.6.0.10
7.6.0.9
7.6.0.8
7.6.0.7
7.6.0.6
7.6.0.5
7.6.0.4
7.6.0.3
7.6.0.2
7.6.0.1
7.6.0.0
7.7
7.2
7.1
7.6
7.5.2
7.5.1
7.5
Vulnerabilities (564)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-12143 |
CWE-93 | High | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 21.07.2026 |
SB20260721116 SB2026072414 SB2026072616 and 21 more |
||
| #VU138733 - Insufficient Verification of Data Authenticity CVE-2026-63913 |
CWE-345 | Medium | 10.5.0.23, 10.6.0.11 | 20.07.2026 |
SB20260720318 SB2026072366 SB2026072479 and 22 more |
||
| #VU135794 - Inefficient Algorithmic Complexity CVE-2026-59880 |
CWE-407 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 29.06.2026 |
SB2026062999 SB2026080424 SB2026091638 and 8 more |
||
| #VU135792 - Integer overflow CVE-2026-59879 |
CWE-190 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 29.06.2026 |
SB2026062999 SB2026080424 SB2026091638 and 8 more |
||
| #VU133017 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-46181 |
CWE-362 | Low | 10.5.0.23, 10.6.0.11 | 29.05.2026 |
SB20260529118 SB2026060548 SB20260610130 and 23 more |
||
| #VU132632 - Double Free CVE-2026-45852 |
CWE-415 | Low | 10.5.0.23, 10.6.0.11 | 28.05.2026 |
SB20260528220 SB2026060964 SB20260610116 and 39 more |
||
| #VU132396 - NULL Pointer Dereference CVE-2026-46086 |
CWE-476 | Low | 10.5.0.23, 10.6.0.11 | 27.05.2026 |
SB2026052797 SB2026070281 SB2026070311 and 28 more |
||
| #VU127822 - Use After Free CVE-2026-31581 |
CWE-416 | Low | 10.5.0.23, 10.6.0.11 | 25.04.2026 |
SB20260425140 SB20260513116 SB20260610130 and 42 more |
||
| #VU127785 - Out-of-bounds read CVE-2026-31613 |
CWE-125 | Medium | 10.5.0.23, 10.6.0.11 | 25.04.2026 |
SB20260425103 SB20260604106 SB2026060964 and 31 more |
||
| #VU125981 - Exposure of sensitive information to an unauthorized actor CVE-2026-40895 |
CWE-200 | Medium | 10.5.0.22, 10.6.0.10, 11.0.0.2 | 14.04.2026 |
SB20260414106 SB2026062434 SB20260625284 and 19 more |
||
| #VU124204 - Out-of-bounds read CVE-2026-23243 |
CWE-125 | Low | 10.5.0.23, 10.6.0.11 | 20.03.2026 |
SB20260320109 SB2026040337 SB20260415174 and 74 more |
||
| #VU123997 - Improper input validation CVE-2026-2391 |
CWE-20 | Medium | 10.5.0.23, 10.6.0.11, 11.0.0.3 | 13.03.2026 |
SB2026031335 SB2026031336 SB2026032417 and 16 more |
||
| #VU122865 - Use After Free CVE-2026-23209 |
CWE-416 | Low | 10.5.0.23, 10.6.0.11 | 16.02.2026 |
SB2026021649 SB2026021911 SB2026031305 and 112 more |
||
| #VU122005 - Improper input validation CVE-2026-22990 |
CWE-20 | Low | 10.5.0.23, 10.6.0.11 | 24.01.2026 |
SB2026012407 SB2026020972 SB2026020973 and 37 more |
||
| #VU121986 - Out-of-bounds read CVE-2026-22984 |
CWE-125 | Low | 10.5.0.23, 10.6.0.11 | 23.01.2026 |
SB20260123107 SB2026020972 SB2026020973 and 39 more |
||
| #VU120557 - Memory corruption CVE-2025-68347 |
CWE-119 | Low | 10.5.0.23, 10.6.0.11 | 26.12.2025 |
SB20251226299 SB2026012390 SB2026012633 and 28 more |
||
| #VU119711 - Use After Free CVE-2023-53781 |
CWE-416 | Low | 10.5.0.23, 10.6.0.11 | 10.12.2025 |
SB2025121081 SB2026012384 SB2026012870 and 28 more |
||
| #VU115387 - Use After Free CVE-2023-53178 |
CWE-416 | Low | 10.5.0.20, 10.6.0.8 | 16.09.2025 |
SB20250916124 SB2025101633 SB2025101634 and 30 more |
||
| #VU112282 - Use After Free CVE-2025-38180 |
CWE-416 | Low | 10.5.0.23, 10.6.0.11 | 05.07.2025 |
SB2025070508 SB2025081507 SB20250818100 and 49 more |
||
| #VU105654 - Use After Free CVE-2025-21858 |
CWE-416 | Low | 10.5.0.23, 10.6.0.11 | 12.03.2025 |
SB2025031253 SB2025040917 SB2025040929 and 56 more |
Showing elements 41 - 60 out of 564