Application Gateway

application_gateway

Vendor: Ibm • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-36397 1Ibm 1Application Gateway Jun 17, 2026 Jan 20, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Application Gateway 23.10 through 25.09 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security contex...Show more IBM Application Gateway 23.10 through 25.09 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.Show less
CVE-2025-36396 1Ibm 1Application Gateway Jun 17, 2026 Jan 20, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...Show more IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2024-45655 1Ibm 1Application Gateway Jun 17, 2026 Jun 3, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment.
CVE-2024-28787 1Ibm 2Application Gateway Security Verify Access Jun 17, 2026 Apr 4, 2024 N/A· v4 10.0 CRITICAL· v3 N/A· v2 IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or cause a denial of service using a specially...Show more IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or cause a denial of service using a specially crafted HTTP request. IBM X-Force ID: 286584.Show less
CVE-2022-22387 1Ibm 1Application Gateway Jun 17, 2026 Sep 28, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...Show more IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 221965.Show less
CVE-2021-20576 1Ibm 2Application Gateway Security Verify Access Jun 17, 2026 Jun 1, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash.
CVE-2021-20575 1Ibm 2Application Gateway Security Verify Access Jun 17, 2026 Jun 1, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system. X-Force ID: 199278.