Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:datapower_gateway:2018.4:*:*:*:*:*:*:*

part: a version: 2018.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDatapower Gateway (f46aee18-98d5-543d-a714-8d875ea0e296)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1663 vulnerable 2026-06-08 05:11:18.545775 Details available
MEDIUM (5.9)
IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 144889.
Published: 2018-12-07T16:00:00.000Z
Updated: 2024-09-17T01:41:02.926Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.