131 matches found
PT-2015-5491
Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance version 2.1 before 2.1.0.3 Description The issue allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors...
Design/Logic Flaw
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...
CVE-2014-6138
CVE-2014-6138 affects IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4. Remote authenticated users can bypass intended grid-data access restrictions via unspecified vectors. The documents do not disclose the root cause or a confirmed exploit path. Affected product/versions are specif...
CVE-2014-6138
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...
PT-2014-7062
Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.1 through 2.5 before FP4 Description The issue allows remote authenticated users to bypass intended grid-data access restrictions. Recommendations For IBM WebSphere DataPower XC10 appliance...
CVE-2014-6138: Exposure of Sensitive Information to an Unauthorized Actor
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...
CVE-2014-6163
Cross-site scripting XSS vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-6143
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response...
Cross site scripting
Cross-site scripting XSS vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Design/Logic Flaw
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response...
CVE-2014-3058
Cross-site request forgery CSRF vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2014-6163
The CVE-2014-6163 issue affects IBM WebSphere DataPower XC10 appliances (versions 2.1 and 2.5) before FP4. It is an XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. The vulnerability impact is described as a client-side script inje...
CVE-2014-6163
Cross-site scripting XSS vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-3058
The CVE-2014-3058 vulnerability affects IBM WebSphere DataPower XC10 appliance versions 2.1 and 2.5 prior to FP4. It is a CSRF flaw that enables remote authenticated users to hijack the authentication of arbitrary users via requests that insert XSS sequences. Exploitation details are not provided...
CVE-2014-6143
The CVE-2014-6143 entry affects IBM WebSphere DataPower XC10 appliances версии 2.1 and 2.5 prior to FP4. The issue enables local users to obtain sensitive information by reading a response, indicating an information-disclosure vulnerability in the appliance’s response handling. The root cause is ...
PT-2014-5052
Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.1 through 2.5 before FP4 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS...
PT-2014-7064
Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.1 and 2.5 before FP4 Description The issue allows local users to obtain sensitive information by reading a response. Recommendations For IBM WebSphere DataPower XC10 appliance version 2.1, appl...
PT-2014-7077
Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.1 through 2.5 before FP4 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to...
CVE-2014-6143: Exposure of Sensitive Information to an Unauthorized Actor
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response...
CVE-2014-6163: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...