[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2014-6138":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":25,"references":27,"score":31,"epss_score":32,"epss_percentile":33,"is_kev":34,"cisa_kev_date_added":35,"cisa_kev_due_date":35,"cisa_ssvc":36,"attack_mappings":42,"exploits":49},172474,"CVE-2014-6138","EUVD-2014-6024","The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors.","2014-12-12T11:59:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":18},"2.0",4,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","NONE","LOW","PARTIAL",true,[21],"CWE-200",[23,24],"cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.5.0.0:*:*:*:*:*:*:*","cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.0:*:*:*:*:*:*:*",[26],"Ibm Websphere Datapower Xc10 Appliance Firmware",[28,29,30],"http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg1IT04614","http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg21691035","https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F96852",0.4,0.01115,0.65822,false,null,{"timestamp":35,"automatable":37,"tech_impact":38,"exploitation":39,"cisa_decision":40,"cisa_remediation_timeline":41},"no","partial","none",{},"FSU",[43],{"name":44,"source":45,"tactics":46,"technique_id":48},"Exploit Public-Facing Application","attack_vector",[47],"initial-access","T1190",[]]