Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm datapower gateway vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2021-38944
IBM DataPower Gateway 10.0.2.0 up to and including 1.0.3.0, 10.0.1.0 up to and including 10.0.1.5, and 2018.4.1.0 up to and including 2018.4.1.18 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an malicious user...
Ibm Datapower Gateway
7.1
CVSSv3
CVE-2018-1421
IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Fo...
Ibm Datapower Gateway
5.3
CVSSv3
CVE-2020-5008
IBM DataPower Gateway 10.0.0.0 up to and including 10.0.1.0 and 2018.4.1.0 up to and including 2018.4.1.14 stores sensitive information in GET request parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer hea...
Ibm Datapower Gateway
7.5
CVSSv3
CVE-2020-4831
IBM DataPower Gateway 10.0.0.0 up to and including 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 189965.
Ibm Datapower Gateway
7.5
CVSSv3
CVE-2020-4994
IBM DataPower Gateway 10.0.1.0 up to and including 10.0.1.4 and 2018.4.1.0 up to and including 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906.
Ibm Datapower Gateway
5.5
CVSSv3
CVE-2018-1652
IBM DataPower Gateway 7.1.0.0 up to and including 7.1.0.19, 7.2.0.0 up to and including 7.2.0.16, 7.5.0.0 up to and including 7.5.0.10, 7.5.1.0 up to and including 7.5.1.9, 7.5.2.0 up to and including 7.5.2.9, and 7.6.0.0 up to and including 7.6.0.2 and IBM MQ Appliance 8.0.0.0 u...
Ibm Datapower Gateway
Ibm Mq Appliance
7.8
CVSSv3
CVE-2019-4294
IBM DataPower Gateway 2018.4.1.0 up to and including 2018.4.1.6, 7.6.0.0 up to and including 7.6.0.15 and IBM MQ Appliance 8.0.0.0 up to and including 8.0.0.12, 9.1.0.0 up to and including 9.1.0.2, and 9.1.1 up to and including 9.1.2 could allow a local malicious user to execute ...
Ibm Mq Appliance
Ibm Datapower Gateway
3.3
CVSSv3
CVE-2022-22326
IBM Datapower Gateway 10.0.2.0 up to and including 10.0.4.0, 10.0.1.0 up to and including 10.0.1.5, and 2018.4.1.0 up to and including 2018.4.1.18 could allow unauthorized viewing of logs and files due to insufficient authorization checks. IBM X-Force ID: 218856.
Ibm Datapower Gateway
Ibm Mq Appliance M2002 Firmware
Ibm Mq Appliance M2001 Firmware
NA
CVE-2009-0120
The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote malicious users to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.
Ibm Websphere Datapower Xml Security Gateway Xs40 3.6.1.5
1 EDB exploit
NA
CVE-2013-0499
Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote malicious users to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firew...
Ibm Websphere Datapower Xc10 Appliance Firmware 3.8.2
Ibm Websphere Datapower Xc10 Appliance Firmware 4.0
Ibm Websphere Datapower Xc10 Appliance Firmware 4.0.1
Ibm Websphere Datapower Xc10 Appliance Firmware 4.0.2
Ibm Websphere Datapower Xc10 Appliance Firmware 5.0.0
Ibm Websphere Datapower Xc10 Appliance -
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 5.0.0
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0.1
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0.2
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 3.8.2
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition -
Ibm Websphere Datapower Service Gateway Xg45 Firmware 5.0.0
Ibm Websphere Datapower Service Gateway Xg45 Firmware 3.8.2
Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0.1
Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0.2
Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0
Ibm Websphere Datapower Service Gateway Xg45 -
Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 5.0.0
Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 3.8.2
Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 4.0.1
Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 4.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »