CVE-2022-32750

IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 228435.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/228435VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6608600Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/228435VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6608600Patch, Vendor Advisory

Published

Aug 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32745A flaw was found in Samba. Samba AD users can cause the serv…8.1
• CVE-2022-32746A flaw was found in the Samba AD LDAP server. The AD DC data…5.4
• CVE-2022-32747A CWE-290: Authentication Bypass by Spoofing vulnerability e…8.1
• CVE-2022-32748A CWE-295: Improper Certificate Validation vulnerability exi…8.3
• CVE-2022-32749 Improper Check for Unusual or Exceptional Conditions vulner…7.5
• CVE-2022-3275Command injection is possible in the puppetlabs-apt module p…9.8
• CVE-2022-32751IBM Security Verify Directory 10.0.0 could disclose sensitiv…5.3
• CVE-2022-32752IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could…8.8
• CVE-2022-32753IBM Security Verify Directory 10.0.0 uses weaker than expect…6.5
• CVE-2022-32754IBM Security Verify Directory 10.0.0 is vulnerable to cross-…4.8
• CVE-2022-32755IBM Security Directory Server 6.4.0 is vulnerable to an XML …9.1
• CVE-2022-32756IBM Security Verify Directory 10.0.0 could allow a remote at…2.7