IBM WebSphere DataPower XC10 Appliance Firmware 2.5.0.0
Approved changes feed: RSS · Atom
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.5.0.0:*:*:*:*:*:*:*
part: o version: 2.5.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Datapower Xc10 Appliance Firmware (211525e8-a5ce-50d0-8b34-2efbb28ff390) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-1970 |
vulnerable | 2026-06-08 05:06:27.007321 |
Details available
The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere.
Published: 2015-08-03T19:00:00.000Z
Updated: 2024-08-06T05:02:42.818Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6163 |
vulnerable | 2026-06-08 05:05:56.581287 |
Details available
Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-12-11T16:00:00.000Z
Updated: 2024-08-06T12:10:12.681Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6143 |
vulnerable | 2026-06-08 05:05:56.527067 |
Details available
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response.
Published: 2014-12-11T16:00:00.000Z
Updated: 2024-08-06T12:10:12.213Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6138 |
vulnerable | 2026-06-08 05:05:56.504702 |
Details available
The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors.
Published: 2014-12-12T11:00:00.000Z
Updated: 2024-08-06T12:10:12.182Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3060 |
vulnerable | 2026-06-08 05:05:30.939384 |
Details available
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.
Published: 2014-10-02T00:00:00.000Z
Updated: 2024-08-06T10:28:46.413Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3059 |
vulnerable | 2026-06-08 05:05:30.938008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3058 |
vulnerable | 2026-06-08 05:05:30.937597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5446 |
vulnerable | 2026-06-08 05:04:51.695604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5428 |
vulnerable | 2026-06-08 05:04:51.658496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5403 |
vulnerable | 2026-06-08 05:04:51.550312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.