6.8
CVE-2015-1893
- EPSS 1.72%
- Veröffentlicht 06.04.2015 00:59:06
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginThe IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Datapower Xc10 Appliance Firmware Version2.1.0.0
Ibm ≫ Websphere Datapower Xc10 Appliance Firmware Version2.1.0.1
Ibm ≫ Websphere Datapower Xc10 Appliance Firmware Version2.1.0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.72% | 0.745 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841
http://www-01.ibm.com/support/docview.wss?uid=swg21701337
http://www.securityfocus.com/bid/73916
http://www.securitytracker.com/id/1032025