WD
Product
Websphere Datapower Xc10 Appliance Firmware
14
CVEs
0
On KEV
2.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 1
Watch
Add Websphere Datapower Xc10 Appliance Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2870 | 2.7 | Jul 2 | Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors Affected: 2.1; 2.5 |
| CVE-2015-1970 | – | Aug 3 | The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain… Affected: 2.1.0.0; 2.1.0.1; 2.1.0.2; 2.1.0.3; 2.5.0.0; 2.5.0.1; +3 more |
| CVE-2015-1893 | – | Apr 6 | The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or… Affected: 2.1.0.0; 2.1.0.1; 2.1.0.2 |
| CVE-2014-6138 | – | Dec 12 | The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors Affected: 2.1.0.0; 2.5.0.0 |
| CVE-2014-6163 | – | Dec 11 | Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or… Affected: 2.1.0.0; 2.5.0.0 |
| CVE-2014-6143 | – | Dec 11 | The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response Affected: 2.1.0.0; 2.5.0.0 |
| CVE-2014-3058 | – | Dec 11 | Cross-site request forgery (CSRF) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to hijack the authentication… Affected: 2.1.0.0; 2.5.0.0 |
| CVE-2014-3060 | – | Oct 2 | Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale… Affected: 2.5.0.0 |
| CVE-2014-3059 | – | Oct 2 | Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging… Affected: 2.5.0.0 |
| CVE-2013-5446 | – | Oct 22 | The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors Affected: 2.1.0.0; 2.5.0.0 |
| CVE-2013-5428 | – | Oct 22 | IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via… Affected: 2.5.0.0 |
| CVE-2013-5403 | – | Sep 27 | Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.1.0.0; 2.1.0.1; +4 more |
| CVE-2013-0499 | – | May 28 | Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote… Affected: 3.8.2; 4.0; 4.0.1; 4.0.2; 5.0.0 |
| CVE-2013-0600 | – | May 9 | Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.1.0.0; 2.1.0.1; +2 more |
Showing 14