What is the CVSS score of CVE-2013-5403?

CVE-2013-5403 has a CVSS 2.0 base score of 10.0 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 1.9%.

Websphere Datapower Xc10 Appliance Firmware CVE-2013-5403

CRITICAL

2013-09-27 psirt@us.ibm.com

Information Disclosure IBM Websphere Datapower Xc10 Appliance Firmware

10.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Sep 27, 2013 - 20:55 cve.org

CRITICAL 10.0

DescriptionCVE.org

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors.

AnalysisAI

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors. Affected products include: Ibm Websphere Datapower Xc10 Appliance Firmware. Version information: through 2.5.0.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Websphere Datapower Xc10 Appliance Firmware

View all

CVE-2014-3060 CRITICAL Act Now

10.0 Oct 02

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administra

CVE-2014-3059 CRITICAL Act Now

10.0 Oct 02

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote

CVE-2013-5446 CRITICAL Act Now

10.0 Oct 22

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which h

CVE-2013-0600 CRITICAL Act Now

9.3 May 09

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote at

CVE-2013-0499 MEDIUM This Month POC

4.3 May 28

Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmwa

CVE-2013-5428 HIGH This Week

7.1 Oct 22

IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows

CVE-2015-1893 MEDIUM This Month

6.8 Apr 06

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrar

CVE-2014-3058 MEDIUM This Month

6.0 Dec 11

Cross-site request forgery (CSRF) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 all

CVE-2014-6138 MEDIUM This Month

4.0 Dec 12

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended g

CVE-2014-6163 LOW Monitor

3.5 Dec 11

Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows rem

CVE-2016-2870 LOW Monitor

2.7 Jul 02

Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to c

CVE-2015-1970 LOW Monitor

2.1 Aug 03

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC