CVE-2025-36396

creationtimestamp| type| source ---|---|--- 2026-01-20 19:08:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuu67g5bs26...

CVE-2025-36396 Security vulnerabilities have been found in IBM Application Gateway

IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...