Vulnerability Details CVE-2025-36373
IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.0%
CVSS Severity
CVSS v3 Score 4.1
Products affected by CVE-2025-36373
-
cpe:2.3:a:ibm:datapower_gateway:*
-
cpe:2.3:a:ibm:datapower_gateway:10.5.0.0
-
cpe:2.3:a:ibm:datapower_gateway:10.5.0.1
-
cpe:2.3:a:ibm:datapower_gateway:10.5.0.2