CVE-2015-1893

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21701337Patch, Vendor Advisory
http://www.securityfocus.com/bid/73916Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032025Third Party Advisory, VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21701337Patch, Vendor Advisory
http://www.securityfocus.com/bid/73916Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032025Third Party Advisory, VDB Entry

Timeline

Published: Apr 6, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-18946.8Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack CVE-2015-18955.0IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to CVE-2015-189610.0Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows remote attackers CVE-2015-18977.2Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to ga CVE-2015-18987.2Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to ga CVE-2015-18997.8IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.CVE-2015-19007.2IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files, and conseque CVE-2015-19011.9The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via u CVE-2015-190210.0Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary CVE-2015-190310.0Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary CVE-2015-19043.5IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when exte CVE-2015-19054.0The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.