CVE-2018-1666

Published: Feb 7, 2019Modified: Nov 21, 2024

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, and 7.7.0.0 through 7.7.1.3 could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. IBM X-Force ID: 144892.

Affected (6)

Products: Ibm: Datapower Gateway

Ibm

1 product

Datapower Gateway

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Datapower Gateway	From 7.5.0.0 to 7.5.0.19
Ibm Datapower Gateway	From 7.5.1.0 to 7.5.1.18
Ibm Datapower Gateway	From 7.5.2.0 to 7.5.2.18
Ibm Datapower Gateway	From 7.6.0.0 to 7.6.0.11
Ibm Datapower Gateway	From 7.7.0.0 to 7.7.1.3
Ibm Datapower Gateway	Version 2018.4.1.0

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/144892

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10744205

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/144892

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10744205

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.