CVE-2014-3060

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0800%

EPSS Percentile34.91th

Published2014年10月2日

Last Modified2026年5月6日

Vulnerability Description

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.

Affected Platforms (CPE)

💻

Ibm

Websphere Datapower Xc10 Appliance Firmware

= 2.5.0.0

🔌

Ibm

Websphere Datapower Xc10 Appliance

All versions

References & Advisories

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21685705

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/93534