CVE-2021-38944: Improper Neutralization of Input During Web Page Generation

IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system,...

PT-2022-10814

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.0.1.0 through 10.0.1.5 IBM DataPower Gateway versions 10.0.2.0 through 1.0.3.0 IBM DataPower Gateway versions 2018.4.1.0 through 2018.4.1.18 Description The issue is caused by improper validation of input by t...

CVE-2020-4994

IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906...

CVE-2021-38872

IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348...

CVE-2021-38872

IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348...

Code injection

IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906...

Code injection

IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348...

CVE-2021-38872

IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348...

CVE-2021-38872

Summary: CVE-2021-38872 affects IBM DataPower Gateway. Affected versions include 10.0.2.0, 10.0.3.0, 10.0.1.0–10.0.1.4, and 2018.4.1.0–2018.4.1.17. The issue is a denial of service caused by a remote user consuming resources by sending multiple requests. The underlying root cause is improper hand...

CVE-2020-4994

IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906...

CVE-2020-4994

Summary of CVE-2020-4994 / IBM DataPower Gateway : Affects IBM DataPower Gateway 10.0.1.0–10.0.1.4 and 2018.4.1.0–2018.4.1.17. A remote attacker could cause a temporary denial of service by sending invalid HTTP requests. The issue is acknowledged by IBM (X-Force ID 192906) and remediated with fix...

Security Bulletin: IBM DataPower Gateway vulnerable to temporary DoS

Summary IBM has addressed the CVEs Vulnerability Details CVEID: CVE-2022-22356 DESCRIPTION: IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts. IBM X-Force ID: 220487. CVSS Base score: 5...

Security Bulletin: IBM DataPower Gateway: Update Redis to remediate two CVEs

Summary IBM has addressed the CVEs Vulnerability Details CVEID: CVE-2021-32626 DESCRIPTION: Redis is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. By executing specially-crafted Lua scripts, a remote authenticated attacker could overflow a buffer and execute...

Security Bulletin: IBM DataPower Gateway vulnerable to HTTP header injection

Summary IBM has addressed the CVE Vulnerability Details CVEID:CVE-2021-38944 DESCRIPTION: IBM DataPower Gateway is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system...

CVE-2021-38872: Undefined Security Weakness

IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348...

CVE-2020-4994: Undefined Security Weakness

IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of service by sending invalid HTTP requests. IBM X-Force ID: 192906...

PT-2022-9045

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.0.1.0 through 10.0.1.4 IBM DataPower Gateway versions 2018.4.1.0 through 2018.4.1.17 Description The issue allows a remote user to cause a temporary denial of service by sending invalid HTTP requests...

PT-2022-10791

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.0.1.0 through 10.0.1.4 IBM DataPower Gateway versions 10.0.2.0 IBM DataPower Gateway versions 10.0.3.0 IBM DataPower Gateway versions 2018.4.1.0 through 2018.4.1.17 Description The issue allows a remote user t...

CVE-2021-38944

IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system,...

IBM DataPower Gateway 安全漏洞

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates, and optimizes access across channel...