CVE-2014-3080: Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches...

Security readout for executives and security teams

CVE-2014-3080 is a cross-site scripting issue in IBM GCM16 and GCM32 Global Console Manager switch firmware before 1.20.20.23447. An attacker could inject script into the management web interface, potentially affecting administrators who use it. Public exploit references exist, but the supplied sources do not show active exploitation. Exposure is most likely where legacy IBM GCM16 or GCM32 appliances remain in service with web management reachable from user networks, vendor VPNs, or the internet. Devices already upgraded to firmware 1.20.20.23447 or later are not described as affected. Treat this as a targeted legacy infrastructure risk, not a broad emergency. Prioritize any internet-exposed or widely reachable console managers because compromise of administrator sessions could affect access to managed systems. Mitigation focus: Inventory IBM GCM16 and GCM32 appliances and confirm firmware versions.; Upgrade affected firmware to 1.20.20.23447 or later per IBM guidance.; Restrict management web access to trusted administration networks only..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.