CVE-2013-5446

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-22 · updated 2026-06-16

Description

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.

Affected products

IBM Websphere Datapower Xc10 Appliance: all versions
IBM Websphere Datapower Xc10 Appliance Firmware: 2.1.0.0, 2.5.0.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IC93164
http://www-01.ibm.com/support/docview.wss?uid=swg1IC96617
http://www.ibm.com/support/docview.wss?uid=swg21653546
https://exchange.xforce.ibmcloud.com/vulnerabilities/87910
http://www-01.ibm.com/support/docview.wss?uid=swg1IC93164
http://www-01.ibm.com/support/docview.wss?uid=swg1IC96617
http://www.ibm.com/support/docview.wss?uid=swg21653546
https://exchange.xforce.ibmcloud.com/vulnerabilities/87910

Get alerted when CVE-2013-5446 or the next vulnerability affects your stack