What is the CVSS score of CVE-2014-3059?

CVE-2014-3059 has a CVSS 2.0 base score of 10.0 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 2.4%.

Is there a patch available for CVE-2014-3059?

Yes, a patch is available for CVE-2014-3059. Update the affected software to the latest version immediately.

Websphere Datapower Xc10 Appliance Firmware CVE-2014-3059

CRITICAL

2014-10-02 psirt@us.ibm.com

IBM Information Disclosure Websphere Datapower Xc10 Appliance Firmware Websphere Datapower Xc10 Appliance

10.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 02, 2014 - 00:55 cve.org

CRITICAL 10.0

DescriptionCVE.org

AnalysisAI

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network. Affected products include: Ibm Websphere Datapower Xc10 Appliance Firmware, Ibm Websphere Datapower Xc10 Appliance.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Websphere Datapower Xc10 Appliance Firmware

View all

CVE-2014-3060 CRITICAL Act Now

10.0 Oct 02

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administra

CVE-2013-5403 CRITICAL Act Now

10.0 Sep 27

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to o

CVE-2013-5446 CRITICAL Act Now

10.0 Oct 22

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which h

CVE-2013-0600 CRITICAL Act Now

9.3 May 09

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote at

CVE-2013-0499 MEDIUM This Month POC

4.3 May 28

Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmwa

CVE-2013-5428 HIGH This Week

7.1 Oct 22

IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows

CVE-2015-1893 MEDIUM This Month

6.8 Apr 06

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrar

CVE-2014-3058 MEDIUM This Month

6.0 Dec 11

Cross-site request forgery (CSRF) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 all

CVE-2014-6138 MEDIUM This Month

4.0 Dec 12

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended g

CVE-2014-6163 LOW Monitor

3.5 Dec 11

Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows rem

CVE-2016-2870 LOW Monitor

2.7 Jul 02

Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to c

CVE-2015-1970 LOW Monitor

2.1 Aug 03

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC