Advisories · Technology

IBM Application Gateway.

Every CVE that names IBM Application Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-36397 CVE record

CVSS 5.4 Medium

Security vulnerabilities have been found in IBM Application Gateway
- IBM Application Gateway
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-36396 CVE record

CVSS 5.4 Medium

Security vulnerabilities have been found in IBM Application Gateway
- IBM Application Gateway
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2024-45655 CVE record

CVSS 5.5 Medium

IBM Application Gateway incorrect permission assignment
- IBM Application Gateway
- Broken access control
Not analysed yet 3 Jun 2025
CVE-2024-28787 CVE record

CVSS 8.7 High

IBM Security Verify Access information disclosure
- IBM Security Verify Access Container
- IBM Security Verify Access Appliance
- CWE-650
Not analysed yet 4 Apr 2024
CVE-2022-22387 CVE record

CVSS 5.4 Medium

Cross-site scripting in IBM Application Gateway
- IBM Application Gateway
- Cross-site scripting (XSS)
Not analysed yet 28 Sept 2022