CVE-2025-36373 in DataPower Gateway 10.6CD

Riassunto

di MITRE • 02/04/2026

IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Ibm
• Prenotare: 15/04/2025
• Divulgazione: 02/04/2026
• Moderazione: accettato
• Voce: VDB-354787
• CPE: pronto
• CWE: CWE-497 (confermato)
• CVSS: 4.1 (CNA)
• EPSS: 0.00252
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-36373
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-36373
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-36373/