Skip to content
OpenAdvisories
Medium · 4.3 CVE-2018-1666 EUVD-2018-12245GHSA-3x43-8h7p-m97w

IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, a…

Published Feb 7, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, and 7.7.0.0 through 7.7.1.3 could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. IBM X-Force ID: 144892.

Affected products

VendorProductAffectedFixed
IBM DataPower Gateway 7.6.0.0, 7.5.2.0, 7.5.1.0, 7.5.0.0, 7.7.0.0, 7.7.1.3, 7.5.0.19, 7.5.1.18, 7.5.2.18, 7.6.0.11, 2018.4.1.0 —

References