Unscored severity · published Jun 28, 2015
CVE-2015-0118
IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ client JAR files that support only…
–
CVSS
1.1%
EPSS
No
On KEV
Description
IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ client JAR files that support only weak TLS ciphers, which might make it easier for remote attackers to obtain sensitive information by sniffing the network during a connection to an Integration Bus node.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Integration Bus · Ibm
9.0; 9.0.0.1; 9.0.0.2; 9.0.0.3 · source: NVD
WM
Websphere Message Broker · Ibm
7.0.; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0118
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0118
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05725
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21957998
More from Integration Bus
9.1
CVE-2016-9706
IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when…
8.1
CVE-2017-1694
IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques
6.7
CVE-2025-36014
IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access to the IIB install directory
6.5
CVE-2024-27265
IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
6.5
CVE-2024-22332
The IBM Integration Bus for z/OS 10.1 through 10.1.0.2 AdminAPI is vulnerable to a denial of service due to file system exhaustion