DG
Product
DataPower Gateway 11.0.0
by IBM · last CVE Oct 8, 2026
41
CVEs
0
On KEV
9.8
Max CVSS
39
New 30D
Severity mix
Critical 9High 24Medium 8Low 0
Watch

Add DataPower Gateway 11.0.0 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-13257
6.5
0%
Oct 8
IBM DataPower Gateway Insufficient Verification of Data Authenticity
Affected: 11.0.0.0 through 11.0.0.2
CVE-2026-14273
6.5
0%
Oct 8
IBM DataPower Gateway Incorrect Authorization
Affected: 11.0.0.0 through 11.0.0.2
CVE-2026-14509
5.9
0%
Oct 8
IBM DataPower Gateway Denial of Service
Affected: 11.0.0.0 through 11.0.0.2
CVE-2026-16182
5.9
0%
Oct 8
IBM DataPower Gateway NULL Pointer Dereference
Affected: 11.0.0.0 through 11.0.0.2
CVE-2026-13258
5.4
0%
Oct 8
IBM DataPower Gateway Cross-Site Scripting
Affected: 11.0.0.0 through 11.0.0.2
CVE-2026-16177
5.3
0%
Oct 8
IBM DataPower Gateway Out-of-bounds Read
Affected: 11.0.0.0 through 11.0.0.2
CVE-2026-14521
4.9
0%
Oct 8
IBM DataPower Gateway affected by server-side request forgery
Affected: 11.0.0.0 through 11.0.0.2
CVE-2026-7366
4.2
0%
Aug 12
IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall
Affected: 11.0.0.0 through 11.0.0.1
Showing 8