Datapower Gateways

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:datapower_gateways:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDatapower Gateways (37eec762-43a6-5e06-b0b1-963e596fdec0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1677 vulnerable 2026-06-08 05:11:18.590658 Details available
MEDIUM (5.1)
IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 145171.
Published: 2018-12-20T14:00:00.000Z
Updated: 2024-09-16T20:17:29.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1669 vulnerable 2026-06-08 05:11:18.553428 Details available
HIGH (7.1)
IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 144950.
Published: 2018-09-25T16:00:00.000Z
Updated: 2024-09-16T22:21:18.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1667 vulnerable 2026-06-08 05:11:18.550190 Details available
MEDIUM (5.4)
IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144893.
Published: 2018-12-13T16:00:00.000Z
Updated: 2024-09-16T17:03:41.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1664 vulnerable 2026-06-08 05:11:18.547120 Details available
MEDIUM (6.2)
IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 echoing of AMP management interface authorization headers exposes login credentials in browser cache. IBM X-Force ID: 144890.
Published: 2018-09-25T16:00:00.000Z
Updated: 2024-09-17T03:07:40.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1663 vulnerable 2026-06-08 05:11:18.541821 Details available
MEDIUM (5.9)
IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 144889.
Published: 2018-12-07T16:00:00.000Z
Updated: 2024-09-17T01:41:02.926Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1661 vulnerable 2026-06-08 05:11:18.541392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1652 vulnerable 2026-06-08 05:11:18.510768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1421 vulnerable 2026-06-08 05:11:18.135125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1773 vulnerable 2026-06-08 05:09:23.049978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1591 vulnerable 2026-06-08 05:09:22.637512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.