Unrated severityNVD Advisory· Published Jul 31, 2022· Updated Sep 16, 2024
CVE-2022-31775
CVE-2022-31775
Description
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228359.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2>=10.0.1.0 <=10.0.1.8, >=10.0.2.0 <=10.0.4.0, =10.5.0.0, >=2018.4.1.0 <=2018.4.1.21+ 1 more
- (no CPE)range: >=10.0.1.0 <=10.0.1.8, >=10.0.2.0 <=10.0.4.0, =10.5.0.0, >=2018.4.1.0 <=2018.4.1.21
- (no CPE)range: 2018.4.1.0
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/228359mitrevdb-entryx_refsource_XF
- www.ibm.com/support/pages/node/6608608mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.