1174 matches found
Design/Logic Flaw
The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors...
CVE-2015-1893
The CVE-2015-1893 entry applies to IBM WebSphere DataPower XC10 Appliance Version 2.1. The vulnerability allows remote attackers to hijack a valid user’s session, leading to potential disclosure of sensitive information or data modification due to improper validation. The IBM Security Bulletin fo...
CVE-2015-1893: Undefined Security Weakness
The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors...
PT-2015-5491
Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance version 2.1 before 2.1.0.3 Description The issue allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors...
CVE-2014-6138
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...
Design/Logic Flaw
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...
CVE-2014-6138
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...
CVE-2014-6138
CVE-2014-6138 affects IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4. Remote authenticated users can bypass intended grid-data access restrictions via unspecified vectors. The documents do not disclose the root cause or a confirmed exploit path. Affected product/versions are specif...
PT-2014-7062
Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.1 through 2.5 before FP4 Description The issue allows remote authenticated users to bypass intended grid-data access restrictions. Recommendations For IBM WebSphere DataPower XC10 appliance...
CVE-2014-6138: Exposure of Sensitive Information to an Unauthorized Actor
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...
CVE-2014-6163
Cross-site scripting XSS vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-6143
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response...
Design/Logic Flaw
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response...
Cross site scripting
Cross-site scripting XSS vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-3058
Cross-site request forgery CSRF vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2014-3058
The CVE-2014-3058 vulnerability affects IBM WebSphere DataPower XC10 appliance versions 2.1 and 2.5 prior to FP4. It is a CSRF flaw that enables remote authenticated users to hijack the authentication of arbitrary users via requests that insert XSS sequences. Exploitation details are not provided...
CVE-2014-6163
The CVE-2014-6163 issue affects IBM WebSphere DataPower XC10 appliances (versions 2.1 and 2.5) before FP4. It is an XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. The vulnerability impact is described as a client-side script inje...
CVE-2014-6143
The CVE-2014-6143 entry affects IBM WebSphere DataPower XC10 appliances версии 2.1 and 2.5 prior to FP4. The issue enables local users to obtain sensitive information by reading a response, indicating an information-disclosure vulnerability in the appliance’s response handling. The root cause is ...
CVE-2014-6163
Cross-site scripting XSS vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...