506 matches found
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in Apache Thrift
Summary Multiple vulnerabilities were addressed in IBM DataPower Gateway versions 11.0.0.3 and 10.6.0.11 Vulnerability Details CVEID:CVE-2026-55968 DESCRIPTION: Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-14507 DESCRIPTION: IBM DataPower Gateway could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in gnutls
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in gnutls in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-3832 DESCRIPTION: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status...
Security Bulletin: IBM DataPower Gateway affected by denial of service due to Coreutils (CVE-2025-5278)
Summary CVE-2025-5278 addressed in IBM DataPower Gateway version 11.0.0.3 Vulnerability Details CVEID:CVE-2025-5278 DESCRIPTION: A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in glibc
Summary Multiple vulnerabilities were addressed in IBM DataPower Gateway version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-5450 DESCRIPTION: Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format width specifier...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in p11-kit
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in p11-kit in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-2100 DESCRIPTION: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the CDeriveKey function on a remote token with...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in glib2
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in glib2 in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-58016 DESCRIPTION: A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file when processing malform...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OS kernel
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in OS kernel in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-46116 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete KASAN...
Security Bulletin: IBM DataPower Gateway affected by cross-site scripting (CVE-2026-14990)
Summary IBM DataPower Gateway affected by cross-site scripting CVE-2026-14990 Vulnerability Details CVEID:CVE-2026-14990 DESCRIPTION: IBM DataPower Gateway vulnerable to open redirect CWE:CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVSS Source: IBM...
Security Bulletin: IBM DataPower Gateway affected by denial of service due to glibc (CVE-2026-4046)
Summary IBM DataPower Gateway has addressed CVE-2026-4046 in glibc in versions 10.6.0.11 and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in gnutls
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in gnutls in versions 10.6.0.11 and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-3833 DESCRIPTION: A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OS kernel
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in OS kernel in versions 10.6.0.11 and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-46086 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU reade...
Security Bulletin: IBM DataPower Gateway affected by server-side request forgery (CVE-2026-14521)
Summary IBM DataPower Gateway affected by server-side request forgery CVE-2026-14521 Vulnerability Details CVEID:CVE-2026-14521 DESCRIPTION: IBM DataPower Gateway is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in Immutable.js
Summary IBM DataPower Gateway affected by multiple CVEs in Immutable.js Vulnerability Details CVEID:CVE-2026-59879 DESCRIPTION: Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Listset, ListsetSize, ListsetIn, ListupdateIn, and the functional set, setIn,...
Security Bulletin: IBM DataPower Gateway affected by cross-site scripting due to DOMPurify (CVE-2026-66010)
Summary IBM DataPower Gateway has addressed CVE-2026-66010 in 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-66010 DESCRIPTION: DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOMELEMENTHANDLING.tagNameCheck, allowing...
Security Bulletin: Due to the use of IBM Semeru Runtime, IBM DataPower Gateway is affected by multiple vulnerabilities
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in IBM Semeru Runtime in versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow chec...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in qs
Summary Multiple vulnerabilities were addressed in IBM DataPower Gateway versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-82417 DESCRIPTION: Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callab...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in xmldom
Summary Multiple vulnerabilities were addressed in IBM DataPower Gateway version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-83605 DESCRIPTION: xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.14 and...
Security Bulletin: IBM DataPower Gateway affected by request smuggling due to form-data (CVE-2026-12143)
Summary IBM DataPower Gateway addressed CVE-2026-12143 in form-data in versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the field argument to...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in http-proxy-middleware
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in http-proxy-middleware in versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-55602 DESCRIPTION: http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0,...