A vulnerability, which was classified as problematic, was found in IBM Application Gateway up to 25.09. Affected is an unknown function. Executing a manipulation can lead to basic cross site scripting.

This vulnerability is tracked as CVE-2025-36397. The attack can be launched remotely. No exploit exists.