Description

IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

INFO

Published Date :

2026-04-01T22:50:51.697Z

Last Modified :

2026-04-03T13:56:04.937Z

Source :

ibm
AFFECTED PRODUCTS

The following products are affected by CVE-2025-36375 vulnerability.

Vendors Products
Ibm
  • Datapower Gateway
  • Datapower Gateway 1050
  • Datapower Gateway 1060
  • Datapower Gateway 106cd
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-36375.

URL Resource
https://www.ibm.com/support/pages/node/7268034 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact