Vulnerabilities > IBM > Websphere Message Broker > 8.0.0.6

DATE CVE VULNERABILITY TITLE RISK
2017-10-04 CVE-2017-1126 Information Exposure vulnerability in IBM Integration BUS and Websphere Message Broker
IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks.
network
low complexity
ibm CWE-200
5.3
2017-07-05 CVE-2017-1144 Untrusted Search Path vulnerability in IBM Integration BUS and Websphere Message Broker
IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting.
local
high complexity
ibm CWE-426
2.5
2017-07-05 CVE-2017-1207 Insufficiently Protected Credentials vulnerability in IBM Integration BUS and Websphere Message Broker
IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user.
local
low complexity
ibm CWE-522
5.5
2016-07-02 CVE-2016-2961 Information Exposure vulnerability in IBM Integration BUS and Websphere Message Broker
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace.
network
low complexity
ibm CWE-200
5.3