Lucene search
K

EUVD-2022-43526

๐Ÿ—“๏ธย 03 Oct 2025ย 20:07:09Reported byย EUVDTypeย 
euvd
ย euvd
๐Ÿ”—ย euvd.enisa.europa.eu๐Ÿ‘ย 1ย Views

IBM DataPower Gateway vulnerabilities could allow user impersonation after password change.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM DataPower Gateway does not invalidate active sessions on a password change (CVE-2022-40228)
26 Mar 202502:42
โ€“ibm
Circl
CVE-2022-40228
22 Nov 202222:13
โ€“circl
CNNVD
IBM DataPower Gateway ไปฃ็ ้—ฎ้ข˜ๆผๆดž
22 Nov 202200:00
โ€“cnnvd
CVE
CVE-2022-40228
22 Nov 202218:52
โ€“cve
Cvelist
CVE-2022-40228 IBM DataPower Gateway session fixation
22 Nov 202218:52
โ€“cvelist
NVD
CVE-2022-40228
22 Nov 202219:15
โ€“nvd
OSV
CVE-2022-40228
22 Nov 202219:15
โ€“osv
Prion
Session fixation
22 Nov 202219:15
โ€“prion
Positive Technologies
PT-2022-25296 ยท Ibm ยท Ibm Datapower Gateway
22 Nov 202200:00
โ€“ptsecurity
RedhatCVE
CVE-2022-40228
22 May 202523:27
โ€“redhatcve
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "752011f1-8861-3464-a783-98f7968a1d5d",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0553319f-bcf5-35b2-ac7c-18332f3be19e",
        "product": {
          "name": "DataPower Gateway"
        },
        "product_version": "10.0.3.0 <10.0.4.0"
      },
      {
        "id": "8e6a1798-550e-38c0-ae8d-0800246e44db",
        "product": {
          "name": "DataPower Gateway"
        },
        "product_version": "10.5.0.0 <10.5.0.2"
      },
      {
        "id": "94c38cdf-083f-3df2-bd36-ab505187727f",
        "product": {
          "name": "DataPower Gateway"
        },
        "product_version": "2018.4.1.0 <2018.4.1.22"
      },
      {
        "id": "b6f4e354-00a2-3c18-b9af-a7e01cc4f2b2",
        "product": {
          "name": "DataPower Gateway"
        },
        "product_version": "10.0.1.0 <10.0.1.9"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
5.7Medium risk
Vulners AI Score5.7
CVSS 3.13.7 - 5.4
EPSS0.00196
SSVC
1