Lucene search

CVE-2022-31775

🗓️ 31 Jul 2022 16:37:06Reported by ibmType

IBM DataPower Gateway XXE vulnerabilit

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2022-31775	1 Aug 202211:15	–	nvd
CNVD	IBM DataPower Gateway XML External Entity Injection Vulnerability (CNVD-2022-56970)	4 Aug 202200:00	–	cnvd
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to XML Entity Expansion attack in Web UI (CVE-2022-31775)	8 Aug 202415:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is vulnerable to an XML External Entity Injection attack (CVE-2022-31775)	10 Feb 202312:38	–	ibm
CVE	CVE-2022-31775	1 Aug 202211:15	–	cve
Prion	Xxe	1 Aug 202211:15	–	prion

[
  {
    "product": "DataPower Gateway",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "2018.4.1.0"
      },
      {
        "status": "affected",
        "version": "10.0.1.0"
      },
      {
        "status": "affected",
        "version": "10.0.2.0"
      },
      {
        "status": "affected",
        "version": "10.0.4.0"
      },
      {
        "status": "affected",
        "version": "10.5.0.0"
      },
      {
        "status": "affected",
        "version": "2018.4.1.20"
      },
      {
        "status": "affected",
        "version": "10.1.0.7"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6608608
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/228359

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Jul 2022 16:06Current

8.9High risk

Vulners AI Score8.9

CVSS35.5

EPSS0.002