Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:datapower_gateway_1100:11.0.0.1:*:*:*:*:*:*:*

part: a version: 11.0.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDatapower Gateway 1100 (86ad22a8-ba49-5586-b90a-c25d4a991421)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7366 vulnerable 2026-09-16 04:34:10.709409 IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall
MEDIUM (4.2)
IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent request processing, X‑Client‑IP values may be contaminated across requests, enabling IP spoofing and disclosure of other clients’ IP addresses.
Published: 2026-08-12T21:19:41.018Z
Updated: 2026-08-13T13:05:37.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12733 vulnerable 2026-09-16 04:32:51.018246 IBM DataPower Gateway affected by denial of service
HIGH (7.5)
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations.
Published: 2026-07-30T17:57:02.684Z
Updated: 2026-07-31T15:59:20.632Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.