What’s Vulnerable › Vulnerabilities

CVE-2015-1893

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-04-06 · updated 2026-06-17
• Weakness: CWE-264

Description

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.

Affected products

• IBM Websphere Datapower Xc10 Appliance Firmware: 2.1.0.0, 2.1.0.1, 2.1.0.2

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841
• http://www-01.ibm.com/support/docview.wss?uid=swg21701337
• http://www.securityfocus.com/bid/73916
• http://www.securitytracker.com/id/1032025
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841
• http://www-01.ibm.com/support/docview.wss?uid=swg21701337
• http://www.securityfocus.com/bid/73916
• http://www.securitytracker.com/id/1032025

Get alerted when CVE-2015-1893 or the next vulnerability affects your stack