VULNERABILITY INTELLIGENCE

CVE-2015-1893

CVSS score6.8 MEDIUM
EPSS probability1.69%
CISA KEVNot currently listed
Published2015-04-06
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.

Primary references