IBM Corporation Integration Bus
4 CVEs affecting IBM Corporation Integration Bus. Latest disclosed: 2017-02-15. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-9706 | Critical | 9.1 | 2017-02-15 | IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE)… |
CVE-2016-9010 | Medium | 6.1 | 2017-02-15 | IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a maliciou… |
CVE-2016-8918 | Medium | 5.9 | 2017-02-01 | IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials. |
CVE-2016-0394 | Low | 3.3 | 2017-02-01 | IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files. |