CVE-2021-38872

Published: May 17, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348.

Affected (4)

Products: Ibm: Datapower Gateway

Ibm

1 product

Datapower Gateway

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Datapower Gateway	From 10.0.1.0 to 10.0.1.4
Ibm Datapower Gateway	From 2018.4.1.0 to 2018.4.1.17
Ibm Datapower Gateway	Version 10.0.2.0
Ibm Datapower Gateway	Version 10.0.3.0

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/208348

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6586704

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/208348

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6586704

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.