← Back to CVE search

CVE-2025-36373

IBM DataPower Gateway

Description

IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.

CVSS 4.1EPSS 0.252%Risk 0.42
View source
Published
2026-04-01 21:16:57
Affected versions
<=10.6.5.0,<=10.5.0.20,<=10.6.0.8
Type
Core software
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N