CVE-2025-36374
MEDIUM
NVD
CVSS Score
5.5
Severity
MEDIUM
Published
Jul 30, 2026
Vendor
unknown
Description
IBM DataPower Gateway is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.