Veille CVE

Recherche « IBM DataPower Gateway 11.0.0 »

39 CVE

Critique 9 Élevée 23 Moyenne 7 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM DataPower Gateway 11.0.0 » ✕
  1. CVE-2026-14999 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentication by forging valid JSON Web Signatures due to improper verification of cryptographic signatures.

  2. CVE-2026-14992 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.

  3. CVE-2026-14988 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.

  4. CVE-2026-14905 8.2 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

  5. CVE-2026-14888 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

  6. CVE-2026-14509 5.9 Moyenne

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to algorithmic complexity in linked-list traversal.

  7. CVE-2026-14508 9.1 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free.

  8. CVE-2026-14507 7.7 Élevée

    IBM DataPower Gateway 11.0.0 · Ibm datapower gateway

    IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.

  9. CVE-2026-14502 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication.

  10. CVE-2026-14497 8.1 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to bypass security restrictions due to improper verification of cryptographic signatures.

  11. CVE-2026-14496 8.2 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.

  12. CVE-2026-14273 6.5 Moyenne

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization.

  13. CVE-2026-14269 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary code on the system.

  14. CVE-2026-13258 5.4 Moyenne

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

  15. CVE-2026-13257 6.5 Moyenne

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity.

  16. CVE-2026-16167 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking.

  17. CVE-2026-16165 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference.

  18. CVE-2026-16164 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.

  19. CVE-2026-16163 8.6 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write.

  20. CVE-2026-16161 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

  21. CVE-2026-16159 8.6 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.

  22. CVE-2026-16111 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw.

  23. CVE-2026-15824 8.2 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.

  24. CVE-2026-15822 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads.

  25. CVE-2026-15819 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator.

  26. CVE-2026-15784 8.1 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

  27. CVE-2026-15781 8.0 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.

  28. CVE-2026-15762 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

  29. CVE-2026-14991 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

  30. CVE-2026-16340 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write in the RFC2047 encoded-word parser.

  31. CVE-2026-16182 5.9 Moyenne

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing.

  32. CVE-2026-16181 7.4 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass security restrictions due to improper authorization.

  33. CVE-2026-16179 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a heap buffer underwrite and potentially crash the service.

  34. CVE-2026-16178 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.

  35. CVE-2026-16177 5.3 Moyenne

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.

  36. CVE-2026-16176 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation.

  37. CVE-2026-16170 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap buffer overflow.

  38. CVE-2026-16169 7.5 Élevée

    IBM DataPower Gateway 11.0.0 · Ibm datapower gateway

    IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

  39. CVE-2026-14521 4.9 Moyenne

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.