VULNERABILITY INTELLIGENCE

CVE-2025-36373

CVSS score4.1 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2026-04-01
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Description

IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.

Weakness classification

  • CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Primary references