CVE-2025-36396 - Security vulnerabilities have been found in IBM Application Gateway

CVE ID : CVE-2025-36396 Published : Jan. 20, 2026, 4:16 p.m. | 35 minutes ago Description : IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...