Aller au contenu
Se connecter
9.3 Critique

CVE-2026-14990 IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting

Description

IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Produits et versions touchés

Produit Versions touchées Corrigé en
DataPower Gateway 10.6.0 10.6 10.6.0.0 → 10.6.0.10 Pas de correctif indiqué

Autres CVE de DataPower Gateway 10.6.0

Les 43 CVE de DataPower Gateway 10.6.0 →
CVE-2026-14269 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0… 9.8 Critique CVE-2026-13257 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0… 6.5 Moyenne CVE-2026-13258 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0… 5.4 Moyenne CVE-2026-14273 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0… 6.5 Moyenne
Suivre cette CVE