# IBM DataPower Gateway. Every CVE that names IBM DataPower Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [IBM DataPower Gateway session fixation](https://agentprime.io/advisories/CVE-2022-40228.md) `CVE-2022-40228` · CVE record: IBM DataPower Gateway · CVSS 3.7 Low · Not analysed yet · Published 22 Nov 2022 · Tags: Authentication bypass - [IBM DataPower Gateway: IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request…](https://agentprime.io/advisories/CVE-2022-31773.md) `CVE-2022-31773` · CVE record: IBM DataPower Gateway · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2022 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0…](https://agentprime.io/advisories/CVE-2022-32750.md) `CVE-2022-32750` · CVE record: IBM DataPower Gateway · CVSS 5.4 Medium · Not analysed yet · Published 31 Jul 2022 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0…](https://agentprime.io/advisories/CVE-2022-31776.md) `CVE-2022-31776` · CVE record: IBM DataPower Gateway · CVSS 6.5 Medium · Not analysed yet · Published 31 Jul 2022 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0…](https://agentprime.io/advisories/CVE-2022-31775.md) `CVE-2022-31775` · CVE record: IBM DataPower Gateway · CVSS 5.5 Medium · Not analysed yet · Published 31 Jul 2022 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0…](https://agentprime.io/advisories/CVE-2022-31774.md) `CVE-2022-31774` · CVE record: IBM DataPower Gateway · CVSS 5.4 Medium · Not analysed yet · Published 31 Jul 2022 - [IBM DataPower Gateway: IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5…](https://agentprime.io/advisories/CVE-2022-22326.md) `CVE-2022-22326` · CVE record: IBM DataPower Gateway · CVSS 4.0 Medium · Not analysed yet · Published 31 Jul 2022 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5…](https://agentprime.io/advisories/CVE-2021-38944.md) `CVE-2021-38944` · CVE record: IBM DataPower Gateway · CVSS 4.8 Medium · Not analysed yet · Published 18 May 2022 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4…](https://agentprime.io/advisories/CVE-2021-38872.md) `CVE-2021-38872` · CVE record: IBM DataPower Gateway · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2022 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could…](https://agentprime.io/advisories/CVE-2020-4994.md) `CVE-2020-4994` · CVE record: IBM DataPower Gateway · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2022 - [IBM DataPower Gateway: IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass…](https://agentprime.io/advisories/CVE-2021-38910.md) `CVE-2021-38910` · CVE record: IBM DataPower Gateway · CVSS 3.7 Low · Not analysed yet · Published 10 Mar 2022 - [IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request…](https://agentprime.io/advisories/CVE-2020-4992.md) `CVE-2020-4992` · CVE record: IBM DataPower Gateway · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2021 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores…](https://agentprime.io/advisories/CVE-2020-5008.md) `CVE-2020-5008` · CVE record: IBM DataPower Gateway · CVSS 3.7 Low · Not analysed yet · Published 7 Jun 2021 - [IBM DataPower Gateway: IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic…](https://agentprime.io/advisories/CVE-2020-4831.md) `CVE-2020-4831` · CVE record: IBM DataPower Gateway · CVSS 5.9 Medium · Not analysed yet · Published 12 Mar 2021 - [IBM DataPower Gateway: IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative…](https://agentprime.io/advisories/CVE-2020-5014.md) `CVE-2020-5014` · CVE record: IBM DataPower Gateway · CVSS 6.7 Medium · Not analysed yet · Published 8 Mar 2021 - [IBM DataPower Gateway: IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12)…](https://agentprime.io/advisories/CVE-2020-4528.md) `CVE-2020-4528` · CVE record: IBM DataPower Gateway · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2020 - [IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to…](https://agentprime.io/advisories/CVE-2020-4581.md) `CVE-2020-4581` · CVE record: IBM DataPower Gateway · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2020 - [IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to…](https://agentprime.io/advisories/CVE-2020-4580.md) `CVE-2020-4580` · CVE record: IBM DataPower Gateway · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2020 - [IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to…](https://agentprime.io/advisories/CVE-2020-4579.md) `CVE-2020-4579` · CVE record: IBM DataPower Gateway · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2020 - [IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to…](https://agentprime.io/advisories/CVE-2020-4205.md) `CVE-2020-4205` · CVE record: IBM DataPower Gateway · CVSS 5.0 Medium · Not analysed yet · Published 19 Mar 2020 - [IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly…](https://agentprime.io/advisories/CVE-2020-4203.md) `CVE-2020-4203` · CVE record: IBM DataPower Gateway · CVSS 4.9 Medium · Not analysed yet · Published 19 Mar 2020 - [IBM DataPower Gateway: IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a…](https://agentprime.io/advisories/CVE-2019-4621.md) `CVE-2019-4621` · CVE record: IBM DataPower Gateway · CVSS 8.1 High · Not analysed yet · Published 9 Dec 2019 - [IBM MQ Appliance: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6…](https://agentprime.io/advisories/CVE-2019-4294.md) `CVE-2019-4294` · CVE record: IBM MQ Appliance and 1 more · CVSS 8.4 High · Not analysed yet · Published 20 Aug 2019 - [IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18…](https://agentprime.io/advisories/CVE-2018-1666.md) `CVE-2018-1666` · CVE record: IBM DataPower Gateway · CVSS 4.3 Medium · Not analysed yet · Published 7 Feb 2019 - [IBM DataPower Gateway: IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18…](https://agentprime.io/advisories/CVE-2018-1668.md) `CVE-2018-1668` · CVE record: IBM DataPower Gateway · CVSS 5.3 Medium · Not analysed yet · Published 29 Jan 2019 - [IBM DataPower Gateway: IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17…](https://agentprime.io/advisories/CVE-2018-1665.md) `CVE-2018-1665` · CVE record: IBM DataPower Gateway · CVSS 5.9 Medium · Not analysed yet · Published 13 Dec 2018 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .