WM
Product
WebSphere Message Broker
23
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 8Low 2
Watch
Add WebSphere Message Broker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9010 | 6.1 | Feb 15 | IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim Affected: 8.0 |
| CVE-2017-1418 | 5.5 | Nov 26 | IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files Affected: 8.0.0.0 through 8.0.0.9 |
| CVE-2017-1207 | 5.5 | Jul 5 | IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +2 more |
| CVE-2018-1801 | 5.3 | Feb 4 | IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker… Affected: 8.0.0.0; 8.0.0.9 |
| CVE-2017-1126 | 5.3 | Oct 4 | IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further… Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +3 more |
| CVE-2016-6080 | 5.3 | Feb 1 | The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker Affected: 8.0 |
| CVE-2016-2961 | 5.3 | Jul 2 | The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive… Affected: 8.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +2 more |
| CVE-2015-7399 | 5.3 | Jan 11 | IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers to obtain sensitive… Affected: 7.0.; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; +8 more |
Showing 8