IBM Corporation Integration Bus vulnerabilities
4 vulnerabilities
Known vulnerabilities in IBM Corporation Integration Bus, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-0394ibm corporationintegration bus+2
EPSS score0.28%
IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files.CVE-2016-9010ibm corporationintegration bus+2EPSS score0.77%
IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM Reference #: 1997906.CVE-2016-9706ibm corporationintegration bus+2EPSS score1.76%
IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1997918.CVE-2016-8918ibm corporationintegration bus+1EPSS score1.09%
IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials.