884 matches found
CVE-2017-1591
IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
Cross site scripting
IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
CVE-2017-1591: Improper Neutralization of Input During Web Page Generation
IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
CVE-2017-1591
The CVE-2017-1591 issue is a cross-site scripting vulnerability in IBM WebSphere DataPower Appliances (7.0.0–7.6) and related IBM MQ Appliance/WebGUI components. The flaw allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. R...
CVE-2017-1591
IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
IBM WebSphere DataPower Appliances Cross-Site Scripting Vulnerability
IBM WebSphere DataPower Appliances is a set of networking appliances from IBM in the United States. The appliances are primarily used to simplify, protect and accelerate XML and Web services deployments in SOA. A cross-site scripting vulnerability exists in IBM WebSphere DataPower Appliances...
Information disclosure
IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator privileges to obtain sensitive information...
CVE-2015-7418
The CVE-2015-7418 entry concerns IBM WebSphere DataPower XC10 Appliance and WebSphere eXtreme Scale where sensitive data can linger in memory instead of being overwritten, enabling a local administrator to access sensitive information. IBM’s advisory specifies affected products and firmware range...
CVE-2015-7418
IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator privileges to obtain sensitive information...
CVE-2015-7418: Exposure of Sensitive Information to an Unauthorized Actor
IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator privileges to obtain sensitive information...
IBM DataPower Gateway Detection
Binary data ibmdatapowergatewaydetect.nbin...
IBM DataPower Gateway < 7.5.2.2 Default Admin Password Security Bypass
According to its self-reported version, the IBM DataPower Gateway running on the remote host is prior to 7.5.2.2. It is, therefore, affected by a security bypass vulnerability due to the default password still being accepted as valid if the administrator logs in before the startup configuration i...
IBM WebSphere DataPower XC10 Appliance Local Information Disclosure Vulnerability (CNVD-2016-04905)
IBM WebSphere DataPower XC10 is a suite of caching platforms from IBM in the United States. A local information disclosure vulnerability exists in the IBM WebSphere DataPower XC10 Appliance, which can be exploited by an attacker to obtain sensitive information...
IBM Websphere DataPower XC10 Denial of Service Vulnerability
IBM Websphere datapower XC10 is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
IBM WebSphere DataPower XC10 Appliance Detection (HTTP)
Detects the installed version of IBM WebSphere DataPower XC10 Appliance. This script sends an HTTP GET request and tries to login via default credentials and fetches the version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
CVE-2016-2870
Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors...
CVE-2016-2870
Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors...
Buffer overflow
Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors...
CVE-2016-2870
CVE-2016-2870 affects IBM WebSphere DataPower XC10 Appliances, specifically versions 2.1 and 2.5. The vulnerability is a buffer overflow in the CLI that can lead to a denial of service, impacting system availability. The issue is documented with a CVSS base score of 2.7 (3.0 vector: CVSS:3.0/AV:N...