IBM WebSphere Datapower XML Security Gateway XS40 vulnerabilities

2 CVEs affecting IBM WebSphere Datapower XML Security Gateway XS40, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-1612, published 2010-04-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0120, published 2009-01-15. High severity, CVSS 7.8. EPSS: 3.6% chance of exploitation in the next 30 days. The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as…
CVE-2010-1612, published 2010-04-29. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a…