Vulnerabilities > IBM > Datapower Gateway > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-08-01 CVE-2022-31775 XXE vulnerability in IBM Datapower Gateway
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
network
low complexity
ibm CWE-611
critical
 9.1
9.1
2019-12-09 CVE-2019-4621 Insecure Default Initialization of Resource vulnerability in IBM Datapower Gateway
IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a default administrator account that is enabled if the IPMI LAN channel is enabled.
network
low complexity
ibm CWE-1188
critical
 9.8
9.8