6.5
CVE-2026-14988
- EPSS 0.22%
- Veröffentlicht 08.10.2026 14:01:07
- Zuletzt bearbeitet 08.10.2026 20:49:50
- Erkennungen
IBM DataPower Gateway Out-of-bounds Read
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerIBM
≫
Produkt
DataPower Gateway 10.6CD
Version <=
10.6.6
Version
10.6.1
Status
affected
HerstellerIBM
≫
Produkt
DataPower Gateway 10.6.0
Version <=
10.6.0.10
Version
10.6.0.0
Status
affected
HerstellerIBM
≫
Produkt
DataPower Gateway 11.0.0
Version <=
11.0.0.2
Version
11.0.0.0
Status
affected
HerstellerIBM
≫
Produkt
DataPower Gateway 10.5.0
Version <=
10.5.0.22
Version
10.5.0.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.119 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| IBM | 6.5 | 3.9 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://www.ibm.com/support/pages/node/7289775