PT-2026-29616 · Ibm · Ibm Datapower Gateway

Published 2026-04-01 · Updated 2026-04-02 · CVE-2025-36373

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.20 and versions 10.6.0.0 through 10.6.0.8 and versions 10.6CD 10.6.1.0 through 10.6.5.0

Description IBM DataPower Gateway may reveal sensitive system information from other domains to a user with administrative privileges.

Recommendations Update IBM DataPower Gateway to a version later than 10.6.5.0 Update IBM DataPower Gateway to a version later than 10.6.0.8 Update IBM DataPower Gateway to a version later than 10.5.0.20

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-36373

Affected Products

Ibm Datapower Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-36373 · Security Note
• https://ibm.com/support/pages/node/7267833 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/2039647764318159111 · Twitter Post