CVE-2025-36375 IBM DataPower Gateway vulnerable to CSRF
An attacker can trick a trusted user into executing unauthorized actions on the IBM DataPower Gateway via cross-site request forgery.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-36375?
CVE-2025-36375 is a medium-severity vulnerability in Ibm Datapower Gateway, published on 1 Apr 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Weakness: CWE-352
Which versions are affected by CVE-2025-36375?
It affects 1 product.
Products include Ibm Datapower Gateway.
How do I fix CVE-2025-36375?
No fix has been published for CVE-2025-36375 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-36375 being exploited?
There is no known exploitation of CVE-2025-36375 in the wild and no public exploit code.
Other vulnerabilities in Ibm Datapower Gateway
Sources
Also known as GHSA-558v-r8m2-hmjm.