Show filters
41 Total Results
Displaying 11-20 of 41
Sort by:
Attacker Value
Unknown
CVE-2021-38910
Disclosure Date: March 09, 2022 (last updated February 23, 2025)
IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused by the improper validation of input. By sending a specially crafted JSON message, an attacker could exploit this vulnerability to modify structure and fields. IBM X-Force ID: 209824.
0
Attacker Value
Unknown
CVE-2020-4992
Disclosure Date: August 16, 2021 (last updated February 23, 2025)
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 192737.
0
Attacker Value
Unknown
CVE-2020-5008
Disclosure Date: June 04, 2021 (last updated February 22, 2025)
IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 193033.
0
Attacker Value
Unknown
CVE-2020-4831
Disclosure Date: March 11, 2021 (last updated February 22, 2025)
IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 189965.
0
Attacker Value
Unknown
CVE-2020-5014
Disclosure Date: March 07, 2021 (last updated February 22, 2025)
IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side requesr forgery attack. IBM X-Force ID: 193247.
0
Attacker Value
Unknown
CVE-2020-4528
Disclosure Date: October 05, 2020 (last updated November 28, 2024)
IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12) could allow a local user, under special conditions, to obtain highly sensitive information from log files. IBM X-Force ID: 182658.
0
Attacker Value
Unknown
CVE-2020-4581
Disclosure Date: September 18, 2020 (last updated November 28, 2024)
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a chunked transfer-encoding HTTP/2 request. IBM X-Force ID: 184441.
0
Attacker Value
Unknown
CVE-2020-4579
Disclosure Date: September 18, 2020 (last updated November 28, 2024)
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted HTTP/2 request with invalid characters. IBM X-Force ID: 184438.
0
Attacker Value
Unknown
CVE-2020-4580
Disclosure Date: September 18, 2020 (last updated November 28, 2024)
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted a JSON request with invalid characters. IBM X-Force ID: 184439.
0
Attacker Value
Unknown
CVE-2020-4203
Disclosure Date: March 18, 2020 (last updated November 27, 2024)
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956.
0
