PT-2017-12335

Name of the Vulnerable Software and Affected Versions IBM WebSphere Message Broker affected versions not specified Description The issue concerns the storage of user credentials in plain text, allowing a local user to read them. Recommendations At the moment, there is no information about a newer...

IBM Integration Bus and WebSphere Message Broker Denial of Service Vulnerability

IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A denial of service vulnerability...

PT-2017-12014

Name of the Vulnerable Software and Affected Versions IBM WebSphere Message Broker affected versions not specified Description The issue could allow a local user with specialized access to prevent the message broker from starting. Recommendations At the moment, there is no information about a new...

IBM Integration Bus and WebSphere Message Broker XML External Entity Injection Vulnerability

IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. An XML external entity injection...

CVE-2016-9706

IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all...

CVE-2016-9010

IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

CVE-2016-9706

IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all...

CVE-2016-9010: Undefined Security Weakness

IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

PT-2017-10279

Name of the Vulnerable Software and Affected Versions IBM Integration Bus versions 9.0 through 10.0 WebSphere Message Broker SOAP FLOWS affected versions not specified Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which can lead to a denia...

CVE-2016-9706: Improper Restriction of XML External Entity Reference

IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all...

PT-2017-9924

Name of the Vulnerable Software and Affected Versions IBM WebSphere Message Broker versions 9.0 through 10.0 Description A remote attacker could hijack the clicking action of a victim by persuading them to visit a malicious web site, potentially launching further attacks against the victim...

CVE-2016-6080

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...

CVE-2016-6080

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...

CVE-2016-0394

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files...

CVE-2016-0394

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files...

CVE-2016-6080

CVE-2016-6080 affects WebSphere Message Broker (WebAdmin) on WebSphere Message Broker v8. The vulnerability allows directory listings via the WebAdmin context, potentially disclosing sensitive information. IBM’s security bulletin confirms the issue and provides a remediation: apply APAR IT16698 i...

CVE-2016-6080

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...

CVE-2016-6080: Exposure of Sensitive Information to an Unauthorized Actor

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...

PT-2017-8881

Name of the Vulnerable Software and Affected Versions WebSphere Message Broker affected versions not specified Description The issue allows directory listings in the WebAdmin context, potentially disclosing sensitive information to attackers. Recommendations At the moment, there is no information...

PT-2017-7617

Name of the Vulnerable Software and Affected Versions IBM Integration Bus and WebSphere Message broker affected versions not specified Description The issue is related to incorrect permissions set for an object, which could allow a local attacker to manipulate certain files. Recommendations At th...