ibm datapower gateway vulnerabilities and exploits

(subscribe to this query)

IBM DataPower Gateway 10.0.2.0 up to and including 10.0.4.0, 10.0.1.0 up to and including 10.0.1.8, 10.5.0.0, and 2018.4.1.0 up to and including 2018.4.1.21 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit th...

Ibm Datapower Gateway 10.5.0.0 Ibm Datapower Gateway

Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote malicious users to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firew...

Ibm Websphere Datapower Xc10 Appliance Firmware 3.8.2 Ibm Websphere Datapower Xc10 Appliance Firmware 4.0 Ibm Websphere Datapower Xc10 Appliance Firmware 4.0.1 Ibm Websphere Datapower Xc10 Appliance Firmware 4.0.2 Ibm Websphere Datapower Xc10 Appliance Firmware 5.0.0 Ibm Websphere Datapower Xc10 Appliance -Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 3.8.2 Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0 Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0.1 Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0.2 Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 5.0.0 Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition -Ibm Websphere Datapower Service Gateway Xg45 Firmware 3.8.2 Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0 Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0.1 Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0.2 Ibm Websphere Datapower Service Gateway Xg45 Firmware 5.0.0 Ibm Websphere Datapower Service Gateway Xg45 -Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 3.8.2 Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 4.0 Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 4.0.1 Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 4.0.2

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances prior to 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote malicious users to cause a denial of...

Ibm Websphere Datapower Xml Accelerator Xa35 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.2 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.1 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.2 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.3 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.4 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.5 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.6 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.7 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.8 Ibm Websphere Datapower Xml Accelerator Xa35 3.7.3.9 Ibm Websphere Datapower Xml Accelerator Xa35 3.8.0.0 Ibm Websphere Datapower Xml Accelerator Xa35 3.8.0.1 Ibm Websphere Datapower Xml Accelerator Xa35 3.8.0.2 Ibm Websphere Datapower Xml Accelerator Xa35 3.8.0.3 Ibm Websphere Datapower Xml Accelerator Xa35 3.8.0.4 Ibm Websphere Datapower Xml Security Gateway Xs40 Ibm Websphere Datapower Xml Security Gateway Xs40 3.7.2 Ibm Websphere Datapower Xml Security Gateway Xs40 3.7.3 Ibm Websphere Datapower Xml Security Gateway Xs40 3.7.3.1 Ibm Websphere Datapower Xml Security Gateway Xs40 3.7.3.2

The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x prior to 7.2.0.1, when the GatewayScript decryption API or a JWE decrypt action is enabled, do not require signed ciphertext data, which makes it easier for remote malicious users to obtain plaintext data v...

Ibm Datapower Gateway

IBM DataPower Gateway 10.0.2.0 up to and including 1.0.3.0, 10.0.1.0 up to and including 10.0.1.5, and 2018.4.1.0 up to and including 2018.4.1.18 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an malicious user...

Ibm Datapower Gateway

IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817.

Ibm Datapower Gateway

IBM DataPower Gateway 10.0.0.0 up to and including 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 189965.

Ibm Datapower Gateway

IBM DataPower Gateway 2018.4.1.0 up to and including 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 192737.

Ibm Datapower Gateway

IBM DataPower Gateway 10.0.1.0 up to and including 10.0.1.4 and 2018.4.1.0 up to and including 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906.

Ibm Datapower Gateway

IBM DataPower Gateway 7.6.0.0 up to and including 7.6.0.10, 7.5.2.0 up to and including 7.5.2.17, 7.5.1.0 up to and including 7.5.1.17, 7.5.0.0 up to and including 7.5.0.18, and 7.7.0.0 up to and including 7.7.1.3 uses weaker than expected cryptographic algorithms that could allo...

Ibm Datapower Gateway

« PREV 1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook