What’s Vulnerable › Vulnerabilities

CVE-2014-3059

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-10-02 · updated 2026-06-17

Description

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network.

Affected products

• IBM Websphere Datapower Xc10 Appliance: all versions
• IBM Websphere Datapower Xc10 Appliance Firmware: 2.5.0.0

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
• http://www-01.ibm.com/support/docview.wss?uid=swg21685705
• https://exchange.xforce.ibmcloud.com/vulnerabilities/93533
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
• http://www-01.ibm.com/support/docview.wss?uid=swg21685705
• https://exchange.xforce.ibmcloud.com/vulnerabilities/93533

Get alerted when CVE-2014-3059 or the next vulnerability affects your stack