IB
Product
Integration Bus
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 2Low 1
Watch
Add Integration Bus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9706 | 9.1 | Feb 15 | IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when… Affected: 9.0.0.0; 9.0; 10; 10.0; 9 |
| CVE-2016-9010 | 6.1 | Feb 15 | IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim Affected: 9.0.0.0; 9.0; 10; 10.0; 9 |
| CVE-2016-8918 | 5.9 | Feb 1 | IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials Affected: 9.0.0.0; 9.0; 10; 10.0; 9 |
| CVE-2016-0394 | 3.3 | Feb 1 | IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files Affected: 9.0.0.0; 9.0; 10; 10.0; 9 |
Showing 4