CyberSec.Space Logo
Back to CVE Browser

CVE-2014-3059

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0970%
EPSS Percentile18.55th
PublishedOct 2, 2014
Last ModifiedMay 6, 2026

Vulnerability Description

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network.

Affected Platforms (CPE)

💻
Ibm

Websphere Datapower Xc10 Appliance Firmware

= 2.5.0.0
🔌
Ibm

Websphere Datapower Xc10 Appliance

All versions

References & Advisories

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21685705
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/93533
🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21685705
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/93533

Related Vulnerabilities

CVE-2014-718610.0

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service ...

CVE-2014-718710.0

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a ...

CVE-2014-049810.0

Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Ma...

CVE-2014-844610.0

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code...