Datapower Gateways (Ibm) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 34 known versions, newest CVE from 2018-12-20. Vendor: Ibm.
CVEs of Datapower Gateways
- CVE-2018-1661 - CVSS 8.8 (high), 2018-12-20: IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
- CVE-2018-1677 - CVSS 5.5 (medium), 2018-12-20: IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling…
- CVE-2018-1667 - CVSS 5.4 (medium), 2018-12-13: IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 is…
- CVE-2018-1652 - CVSS 6.2 (medium), 2018-12-11: IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and…
- CVE-2018-1663 - CVSS 5.9 (medium), 2018-12-07: IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly…
- CVE-2018-1669 - CVSS 7.1 (high), 2018-09-25: IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM…
- CVE-2018-1664 - CVSS 7.8 (high), 2018-09-25: IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM…
- CVE-2018-1421 - CVSS 7.1 (high), 2018-04-04: IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML…
- CVE-2017-1773 - CVSS 4 (medium), 2018-01-31: IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning…
- CVE-2017-1591 - CVSS 6.1 (medium), 2017-09-28: IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
