CVE-2025-36396 in Application Gateway信息

摘要

由 VulDB • 2026-06-03

IBM Application Gateway 从版本 23.10 到 25.09 存在跨站脚本（XSS）漏洞。该漏洞允许经过身份验证的用户在 Web UI 中嵌入任意 JavaScript 代码，从而改变预期功能，可能导致受信任会话中的凭据泄露。

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

披露

管理

条目

CPE

CWE

CWE-79 (已确认)

CVSS

EPSS

KEV

活动

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-36396
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-36396
CVE Details	https://www.cvedetails.com/cve/CVE-2025-36396/

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!