Ghostwire

CVE-2025-36374: IBM DataPower Gateway is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A...

MEDIUM CVSS 0.0

Published: July 30, 2026 | Last Modified: July 30, 2026

Description

IBM DataPower Gateway is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References