CVE-2020-4581: IBM Datapower Gateway

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a chunked transfer-encoding HTTP/2 request. IBM X-Force ID: 184441.

Affected products

  • IBM Datapower Gateway: from 2018.4.1.0, up to and including 2018.4.1.12

Published 2020-09-21. Last modified 2026-06-17.