CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-7427

IBM DataPower Gateway appliances with firmware 6.x before 6.0.0.17, 6.0.1.x before 6.0.1.17, 7.x before 7.0.0.10, 7.1.0.x before 7.1.0.7, and 7.2.x before 7.2.0.1 do not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.2%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2015-7427

Ibm » Datapower Gateway » Version: N/A

cpe:2.3:a:ibm:datapower_gateway:-
Ibm » Datapower Gateway » Version: 6.0.1.0

cpe:2.3:a:ibm:datapower_gateway:6.0.1.0
Ibm » Datapower Gateway » Version: 6.0.1.1

cpe:2.3:a:ibm:datapower_gateway:6.0.1.1
Ibm » Datapower Gateway » Version: 6.0.1.10

cpe:2.3:a:ibm:datapower_gateway:6.0.1.10
Ibm » Datapower Gateway » Version: 6.0.1.11

cpe:2.3:a:ibm:datapower_gateway:6.0.1.11
Ibm » Datapower Gateway » Version: 6.0.1.12

cpe:2.3:a:ibm:datapower_gateway:6.0.1.12
Ibm » Datapower Gateway » Version: 6.0.1.13

cpe:2.3:a:ibm:datapower_gateway:6.0.1.13
Ibm » Datapower Gateway » Version: 6.0.1.14

cpe:2.3:a:ibm:datapower_gateway:6.0.1.14
Ibm » Datapower Gateway » Version: 6.0.1.15

cpe:2.3:a:ibm:datapower_gateway:6.0.1.15
Ibm » Datapower Gateway » Version: 6.0.1.16

cpe:2.3:a:ibm:datapower_gateway:6.0.1.16
Ibm » Datapower Gateway » Version: 6.0.1.2

cpe:2.3:a:ibm:datapower_gateway:6.0.1.2
Ibm » Datapower Gateway » Version: 6.0.1.3

cpe:2.3:a:ibm:datapower_gateway:6.0.1.3
Ibm » Datapower Gateway » Version: 6.0.1.4

cpe:2.3:a:ibm:datapower_gateway:6.0.1.4
Ibm » Datapower Gateway » Version: 6.0.1.5

cpe:2.3:a:ibm:datapower_gateway:6.0.1.5
Ibm » Datapower Gateway » Version: 6.0.1.6

cpe:2.3:a:ibm:datapower_gateway:6.0.1.6
Ibm » Datapower Gateway » Version: 6.0.1.7

cpe:2.3:a:ibm:datapower_gateway:6.0.1.7
Ibm » Datapower Gateway » Version: 6.0.1.8

cpe:2.3:a:ibm:datapower_gateway:6.0.1.8
Ibm » Datapower Gateway » Version: 6.0.1.9

cpe:2.3:a:ibm:datapower_gateway:6.0.1.9
Ibm » Datapower Gateway » Version: 7.0.0.0

cpe:2.3:a:ibm:datapower_gateway:7.0.0.0
Ibm » Datapower Gateway » Version: 7.0.0.1

cpe:2.3:a:ibm:datapower_gateway:7.0.0.1
Ibm » Datapower Gateway » Version: 7.0.0.2

cpe:2.3:a:ibm:datapower_gateway:7.0.0.2
Ibm » Datapower Gateway » Version: 7.0.0.3

cpe:2.3:a:ibm:datapower_gateway:7.0.0.3
Ibm » Datapower Gateway » Version: 7.0.0.4

cpe:2.3:a:ibm:datapower_gateway:7.0.0.4
Ibm » Datapower Gateway » Version: 7.0.0.5

cpe:2.3:a:ibm:datapower_gateway:7.0.0.5
Ibm » Datapower Gateway » Version: 7.0.0.6

cpe:2.3:a:ibm:datapower_gateway:7.0.0.6
Ibm » Datapower Gateway » Version: 7.0.0.7

cpe:2.3:a:ibm:datapower_gateway:7.0.0.7
Ibm » Datapower Gateway » Version: 7.0.0.8

cpe:2.3:a:ibm:datapower_gateway:7.0.0.8
Ibm » Datapower Gateway » Version: 7.0.0.9

cpe:2.3:a:ibm:datapower_gateway:7.0.0.9
Ibm » Datapower Gateway » Version: 7.1.0.0

cpe:2.3:a:ibm:datapower_gateway:7.1.0.0
Ibm » Datapower Gateway » Version: 7.1.0.1

cpe:2.3:a:ibm:datapower_gateway:7.1.0.1
Ibm » Datapower Gateway » Version: 7.1.0.2

cpe:2.3:a:ibm:datapower_gateway:7.1.0.2
Ibm » Datapower Gateway » Version: 7.1.0.3

cpe:2.3:a:ibm:datapower_gateway:7.1.0.3
Ibm » Datapower Gateway » Version: 7.1.0.4

cpe:2.3:a:ibm:datapower_gateway:7.1.0.4
Ibm » Datapower Gateway » Version: 7.1.0.5

cpe:2.3:a:ibm:datapower_gateway:7.1.0.5
Ibm » Datapower Gateway » Version: 7.1.0.6

cpe:2.3:a:ibm:datapower_gateway:7.1.0.6
Ibm » Datapower Gateway » Version: 7.2.0.0

cpe:2.3:a:ibm:datapower_gateway:7.2.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-7427

Products

Pricing

Contact Us