IBM Websphere Message Broker vulnerabilities, page 2

23 vulnerabilities

Known vulnerabilities in IBM Websphere Message Broker, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2017-1126ibmintegration_bus+1
EPSS score
1.22%
IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341.5.5CVE-2017-1418ibmintegration_bus+1
EPSS score
0.33%
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406.2.1CVE-2009-0503ibmwebsphere_message_broker
EPSS score
0.33%
IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows local users to obtain sensitive information by reading these logs.