WID-SEC-W-2025-0686

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM DataPower Gateway: Mehrere Schwachstellen

view advisory published 2025-04-02

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM DataPower Gateway ausnutzen, um einen Denial of Service Angriff durchzuführen, oder seine Privilegien zu erweitern.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-12224UShigh8.8—
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat a…
CVE-2024-11738UShigh7.5—
A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan