IBM DataPower Gateway 10.6.0.0-10.6.0.8

productDE

cpe:/a:ibm:datapower_gateway:10.6.0.0_-_10.6.0.8

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

1critical8high2medium0low

updated 2026-10-27

vulnerabilities (242)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-0266US	high7.0OT critical	3.67% (90th)	KEV	no fix	2023-01-30	—
CVE-2022-42719US	high8.8	1.35% (71st)	—	no fix	2022-10-13	—
CVE-2025-12183US	—	0.70% (53rd)	—	no fix	2025-11-28	—
CVE-2023-54219US	—	0.69% (53rd)	—	no fix	2025-12-30	—
CVE-2023-54257US	—	0.62% (49th)	—	no fix	2025-12-30	—
CVE-2022-50885US	—	0.60% (49th)	—	no fix	2025-12-30	—
CVE-2023-54306US	—	0.60% (48th)	—	no fix	2025-12-30	—
CVE-2022-50861US	—	0.58% (48th)	—	no fix	2025-12-30	—
CVE-2025-14915US	high7.2	0.58% (47th)	—	no fix	2026-03-25	—
CVE-2023-54258US	—	0.56% (46th)	—	no fix	2025-12-30	—
CVE-2023-54237US	—	0.56% (46th)	—	no fix	2025-12-30	—
CVE-2023-54292US	—	0.55% (46th)	—	no fix	2025-12-30	—
CVE-2023-54269US	—	0.55% (46th)	—	no fix	2025-12-30	—
CVE-2023-54203US	—	0.55% (46th)	—	no fix	2025-12-30	—
CVE-2022-50865US	—	0.53% (44th)	—	no fix	2025-12-30	—
CVE-2025-6052US	high7.5	0.52% (44th)	—	no fix	2025-06-13	—
CVE-2023-54280US	—	0.52% (44th)	—	no fix	2025-12-30	—
CVE-2023-54227US	—	0.51% (43rd)	—	no fix	2025-12-30	—
CVE-2023-54250US	—	0.48% (41st)	—	no fix	2025-12-30	—
CVE-2025-39975US	—	0.47% (40th)	—	no fix	2025-10-15	—
CVE-2023-54223US	—	0.45% (39th)	—	no fix	2025-12-30	—
CVE-2025-7425US	—	0.44% (38th)	—	no fix	2025-07-10	—
CVE-2025-14917US	critical9.8OT elevated	0.42% (36th)	—	no fix	2026-03-25	—
CVE-2022-50880US	—	0.32% (25th)	—	no fix	2025-12-30	—
CVE-2026-1561US	medium5.4	0.31% (23rd)	—	no fix	2026-03-25	—
CVE-2023-54286US	—	0.30% (23rd)	—	no fix	2025-12-30	—
CVE-2023-54214US	—	0.30% (23rd)	—	no fix	2025-12-30	—
CVE-2022-50848US	—	0.28% (21st)	—	no fix	2025-12-30	—
CVE-2022-50846US	—	0.28% (21st)	—	no fix	2025-12-30	—
CVE-2022-50840US	—	0.28% (21st)	—	no fix	2025-12-30	—
CVE-2022-50838US	—	0.28% (21st)	—	no fix	2025-12-30	—
CVE-2022-50829US	—	0.28% (21st)	—	no fix	2025-12-30	—
CVE-2025-39982US	—	0.28% (21st)	—	no fix	2025-10-15	—
CVE-2023-54318US	—	0.28% (20th)	—	no fix	2025-12-30	—
CVE-2023-54262US	—	0.27% (19th)	—	no fix	2025-12-30	—
CVE-2025-40000US	—	0.27% (19th)	—	no fix	2025-10-15	—
CVE-2022-50834US	—	0.26% (18th)	—	no fix	2025-12-30	—
CVE-2026-21947US	—	0.25% (16th)	—	no fix	2026-01-20	—
CVE-2022-50845US	—	0.25% (16th)	—	no fix	2025-12-30	—
CVE-2022-50836US	—	0.25% (16th)	—	no fix	2025-12-30	—
CVE-2022-50832US	—	0.25% (16th)	—	no fix	2025-12-30	—
CVE-2025-39983US	—	0.25% (16th)	—	no fix	2025-10-15	—
CVE-2022-50839US	—	0.24% (16th)	—	no fix	2025-12-30	—
CVE-2022-50859US	—	0.24% (16th)	—	no fix	2025-12-30	—
CVE-2022-50858US	—	0.24% (16th)	—	no fix	2025-12-30	—
CVE-2022-50843US	—	0.24% (16th)	—	no fix	2025-12-30	—
CVE-2022-50830US	—	0.24% (16th)	—	no fix	2025-12-30	—
CVE-2023-54230US	—	0.24% (15th)	—	no fix	2025-12-30	—
CVE-2022-50868US	—	0.24% (15th)	—	no fix	2025-12-30	—
CVE-2022-50857US	—	0.24% (15th)	—	no fix	2025-12-30	—

showing 50 of 242

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference49 CVEs
CWE-416Use After Free41 CVEs
CWE-401Missing Release of Memory after Effective Lifetime25 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer14 CVEs
CWE-772Missing Release of Resource after Effective Lifetime9 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')8 CVEs
CWE-125Out-of-bounds Read8 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')8 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)242 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan