Volerion logoVolerion
Volerion logoVolerion

IBM DataPower Gateway Cross-Site Request Forgery Vulnerability

Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in IBM DataPower Gateway versions 10.6CD (10.6.1.0 through 10.6.5.0), 10.5.0 (10.5.0.0 through 10.5.0.20), and 10.6.0 (10.6.0.0 through 10.6.0.8). This vulnerability could allow an attacker to perform malicious and unauthorized actions on behalf of a trusted user.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of a user, potentially allowing attackers to manipulate data or settings within the application.

Remediation

Users are advised to upgrade to IBM DataPower Gateway version 10.6.6.0, 10.6.0.9, or 10.5.0.21, depending on their current version. Instructions for downloading these versions are available in the IBM DataPower Gateway documentation.

Added: Apr 1, 2026, 11:38 PM
Updated: Apr 1, 2026, 11:38 PM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
2.5
exploitability
6.4
remediation
7.7
relevance
5.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.