ibm websphere datapower xc10 appliance

Name: ibm websphere datapower xc10 appliance
Brand: ibm

productUS

cpe:2.3:h:ibm:websphere_datapower_xc10_appliance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical7high2medium0low

updated 2026-10-27

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-0600US	high9.3OT elevated	2.72% (86th)	—	no fix	2013-05-09	—
CVE-2014-3060US	high10.0OT elevated	2.41% (84th)	—	no fix	2014-10-02	—
CVE-2014-3059US	high10.0	2.41% (84th)	—	no fix	2014-10-02	—
CVE-2012-5758US	high7.8	2.36% (84th)	—	no fix	2012-11-23	7 versions
CVE-2012-5759US	high9.0	2.20% (82nd)	—	no fix	2012-11-23	7 versions
CVE-2013-5428US	high7.1	1.69% (77th)	—	no fix	2013-10-22	—
CVE-2013-5446US	high10.0	1.68% (77th)	—	no fix	2013-10-22	—
CVE-2012-5756US	medium4.3	1.35% (71st)	—	no fix	2012-11-23	7 versions
CVE-2013-0499US	medium4.3	1.21% (68th)	—	no fix	2013-05-28	—

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2642 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-384Session Fixation2 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-310CWE-3101 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.