IBM DataPower Gateway is vulnerable to server‑side request forgery, a flaw that can allow an authenticated attacker to send requests from the gateway to arbitrary internal resources. The result can be disclosure of network topology or other confidential internal data, and may serve as a foothold for further attacks.

The vulnerability covers IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2.

The CVSS score of 4.9 indicates a moderate risk. The EPSS score is unspecified, suggesting limited public exploitation data. The vulnerability is not listed in CISA's KEV catalog, so no known widespread exploitation is reported. The attack requires valid authentication to the DataPower Gateway; once authenticated, the attacker can issue arbitrary internal requests, enabling network enumeration and potentially other attacks.