Vulnerabilities > IBM > Datapower Gateway > 2018.4.1.8

DATE CVE VULNERABILITY TITLE RISK
2020-09-21 CVE-2020-4580 Unspecified vulnerability in IBM Datapower Gateway
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted a JSON request with invalid characters.
network
low complexity
ibm
5.0
2020-09-21 CVE-2020-4579 Unspecified vulnerability in IBM Datapower Gateway
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted HTTP/2 request with invalid characters.
network
low complexity
ibm
5.0
2020-03-19 CVE-2020-4205 Improper Authentication vulnerability in IBM Datapower Gateway
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have been revolked.
network
low complexity
ibm CWE-287
6.5
2020-03-19 CVE-2020-4203 Information Exposure vulnerability in IBM Datapower Gateway
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls.
network
low complexity
ibm CWE-200
4.0