Login Request a demo
AG
Product
Application Gateway
by Ibm · last CVE Jan 20, 2026
7
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 1Medium 4Low 1
Severity
All severities7Critical1High1Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Application Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-28787
10.0
1%
Apr 4
IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or…
Affected: 20.01 through 24.03
CVE-2021-20576
7.5
2%
Jun 1
IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash
Affected: 1.0
CVE-2024-45655
5.5
0%
Jun 3
IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment
Affected: 19.12 through 24.09
CVE-2025-36397
5.4
0%
Jan 20
IBM Application Gateway 23.10 through 25.09 is vulnerable to HTML injection
Affected: 23.10 through 25.09
CVE-2025-36396
5.4
0%
Jan 20
IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting
Affected: 23.10 through 25.09
CVE-2022-22387
5.4
0%
Sep 28
IBM Application Gateway is vulnerable to cross-site scripting
Affected: 1.0
CVE-2021-20575
3.3
0%
Jun 1
IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system
Affected: 1.0
Showing 7