← Back

Datapower Gateway

datapower_gateway

Vendor: Ibm • 81 CVEs

CVEs (81)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-7412
1Ibm
1Datapower Gateway
May 6, 2026
Nov 8, 2015
N/A· v4
N/A· v3
2.6 LOW· v2
The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when the GatewayScript decryption API or a JWE decrypt action is enabled, do not require signed ciphertext data, which makes it ea...Show more
The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when the GatewayScript decryption API or a JWE decrypt action is enabled, do not require signed ciphertext data, which makes it easier for remote attackers to obtain plaintext data via a padding-oracle attack.Show less