CVE-2018-1666 — IBM Datapower Gateway vulnerability

3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 62.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Datapower Gateway
Timeline
PublishedFeb 7
Latest updateMay 13

Description

IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, and 7.7.0.0 through 7.7.1.3 could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. IBM X-Force ID: 144892.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDibm/datapower_gateway7.5.0.0 — 7.5.0.19+5
▶CVEListV5ibm/datapower_gateway11 versions+10

🔴Vulnerability Details

2
GHSA
GHSA-3x43-8h7p-m97w: IBM DataPower Gateway 2018↗2022-05-13
▶
CVEList
CVE-2018-1666: IBM DataPower Gateway 2018↗2019-02-07
▶
CVE-2018-1666 — IBM Datapower Gateway vulnerability | cvebase