Vulnerabilities > IBM > Integration BUS > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-03-14 CVE-2024-27265 Unspecified vulnerability in IBM Integration BUS 10.1/10.1.0.2/10.1.0.3
IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
network
low complexity
ibm
6.5
2024-02-09 CVE-2024-22332 Unspecified vulnerability in IBM Integration BUS 10.1/10.1.0.2
The IBM Integration Bus for z/OS 10.1 through 10.1.0.2 AdminAPI is vulnerable to a denial of service due to file system exhaustion.
network
low complexity
ibm
6.5
2023-10-14 CVE-2023-45176 Unspecified vulnerability in IBM APP Connect Enterprise and Integration BUS
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for integration nodes on Windows.
local
low complexity
ibm
5.5
2019-02-04 CVE-2018-1801 XXE vulnerability in IBM products
IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
network
low complexity
ibm CWE-611
5.3
2018-11-26 CVE-2017-1418 Permission Issues vulnerability in IBM Integration BUS and Websphere Message Broker
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files.
local
low complexity
ibm CWE-275
5.5
2018-01-19 CVE-2017-1693 Insufficient Session Expiration vulnerability in IBM Integration BUS
IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out.
network
high complexity
ibm CWE-613
5.6
2017-10-04 CVE-2017-1126 Information Exposure vulnerability in IBM Integration BUS and Websphere Message Broker
IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks.
network
low complexity
ibm CWE-200
5.3
2017-07-05 CVE-2017-1207 Insufficiently Protected Credentials vulnerability in IBM Integration BUS and Websphere Message Broker
IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user.
local
low complexity
ibm CWE-522
5.5
2017-02-15 CVE-2016-9010 7PK - Security Features vulnerability in IBM Integration BUS and Websphere Message Broker
IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim.
network
low complexity
ibm CWE-254
6.1
2017-02-01 CVE-2016-8918 Credentials Management vulnerability in IBM Integration BUS 10.0
IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials.
network
high complexity
ibm CWE-255
5.9