Skip to content
OpenAdvisories

Product · IBM

Application Gateway

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-36397

    Security vulnerabilities have been found in IBM Application Gateway

    IBM Application Gateway 23.10 through 25.09 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

    IBM Application Gateway
  • Medium 5.4
    CVE-2025-36396

    Security vulnerabilities have been found in IBM Application Gateway

    IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials dis…

    IBM Application Gateway
  • Medium 5.5
    CVE-2024-45655

    IBM Application Gateway incorrect permission assignment

    IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment.

    IBM Application Gateway
  • Medium 5.4
    CVE-2022-22387

    IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS…

    IBM Application Gateway