Skip to content

Known vulnerabilities in IBM DataPower Gateways

Is your version affected?

CVE Summary Score Published
CVE-2018-1677 IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of… 5.1 Medium Dec 20, 2018
CVE-2018-1661 IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an… 6.5 Medium Dec 20, 2018
CVE-2018-1667 IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through… 5.4 Medium Dec 13, 2018
CVE-2018-1652 IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through… 6.2 Medium Dec 11, 2018
CVE-2018-1663 IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information,… 5.9 Medium Dec 7, 2018
CVE-2018-1669 IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 -… 7.1 High Sep 25, 2018
CVE-2018-1664 IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 -… 6.2 Medium Sep 25, 2018
CVE-2018-1421 IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection… 7.1 High Apr 4, 2018
CVE-2017-1773 IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS… Not rated Jan 31, 2018
CVE-2017-1591 IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting Not rated Sep 27, 2017

Other IBM products