CVE-2013-5403

IBM WebSphere DataPower XC10 Appliance is affected (versions 2.0, 2.1, 2.5). CVE-2013-5403 describes an unauthenticated, remote-access vulnerability that allows administrative access to code and data. The IBM security bulletin confirms affected firmware ranges and provides remediation guidance: u...

CVE-2013-5403

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors...

PT-2013-5518

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.0 through 2.5.0.1 Description The issue allows remote attackers to obtain administrative access via unknown vectors. Recommendations For versions 2.0 through 2.5.0.1, update to a version that...

CVE-2013-5403: Undefined Security Weakness

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors...

IBM Websphere DataPower server detection

Binary data 6867.prm...

CVE-2013-0499

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

Cross site scripting

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

CVE-2013-0499

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

CVE-2013-0499

CVE-2013-0499 affects IBM WebSphere DataPower appliances (firmware 3.8.2, 4.0, 4.0.1, 4.0.2, 5.0.0). The vulnerability is a cross-site scripting (XSS) flaw in the echo functionality used by XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token Service when configured to bl...

PT-2013-2385

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower SOA appliances versions 3.8.2 through 5.0.0 Description A cross-site scripting XSS issue exists in the echo functionality, allowing remote attackers to inject arbitrary web script or HTML via a SOAP message. This affect...

CVE-2013-0499: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

IBM WebSphere DataPower 3.8.2 / 4.0.x / 5.0 Cross Site Scripting

IBM WebSphere DataPower Integration Appliance XI50 versions 3.8.2, 4.0, 4.0.1, 4.0.2, 5.0.0 suffer from a cross site scripting vulnerability. ======================================================================= title: JavaScript Execution in WebSphere DataPower Services product: IBM WebSphere...

CVE-2013-0600

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors...

Authentication flaw

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors...

CVE-2013-0600

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors...

CVE-2013-0600

Technical details about CVE-2013-0600 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-0600: Undefined Security Weakness

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors...

PT-2013-2454

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 Appliance versions 2.0 through 2.1 FP3 Description The issue allows remote attackers to bypass authentication and perform administrative actions. Recommendations For versions 2.0 through 2.1 FP3, at the moment, the...

CVE-2012-5758

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote attackers to cause a denial of service process exit via unknown vectors...

CVE-2012-5756

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different customers' installations, which allows remote attackers to spoof a container server by 1 sniffing the...