IBM Security Network Protection Firmware vulnerabilities

4 CVEs affecting IBM Security Network Protection Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0201, published 2016-01-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0201, published 2016-01-18. Medium severity, CVSS 5.9. EPSS: 2% chance of exploitation in the next 30 days. GSKit in IBM Security Network Protection 5.3.1 before 5.3.1.7 and 5.3.2 allows remote attackers to discover credentials by triggering an MD5 collision.
CVE-2013-5442, published 2013-11-13. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1…
CVE-2014-6183, published 2014-11-23. Medium severity, CVSS 4.0. EPSS: 1.8% chance of exploitation in the next 30 days. IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1.2.0 FP9, 5.1.2.1 before FP5, 5.2 before 5.2.0.0 FP5, and 5.3 before 5.3.0.0 FP1 on XGS devices…
CVE-2014-6198, published 2015-06-28. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3.1 allows remote attackers to hijack the authentication of arbitrary users.