59 matches found
PT-2016-4156
Name of the Vulnerable Software and Affected Versions IBM Multi-Enterprise Integration Gateway versions 1.0 through 1.0.0.1 B2B Advanced Communications versions 1.0.0.2 through 1.0.0.4 Description The issue allows remote attackers to potentially obtain sensitive information by sniffing the networ...
CVE-2015-7445
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...
Design/Logic Flaw
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...
CVE-2015-7445
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...
CVE-2015-7445
CVE-2015-7445 affects IBM Multi-Enterprise Integration Gateway (versions 1.0–1.0.0.1) and B2B Advanced Communications (1.x prior to 1.0.0.4). When guest access is enabled, remote authenticated users can read error responses to disclose sensitive information. Public sources also document disclosur...
PT-2016-3782
Name of the Vulnerable Software and Affected Versions IBM Multi-Enterprise Integration Gateway versions 1.0 through 1.0.0.1 B2B Advanced Communications versions 1.x before 1.0.0.4 Description The issue allows remote authenticated users to obtain sensitive information by reading error messages in...
CVE-2015-7445: Exposure of Sensitive Information to an Unauthorized Actor
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...
CVE-2015-5022
IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information ...
CVE-2015-4973
Cross-site scripting XSS vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Design/Logic Flaw
IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information ...
CVE-2015-4973
Cross-site scripting XSS vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-4973
Summary: CVE-2015-4973 is an XSS vulnerability affecting IBM’s Multi-Enterprise Integration Gateway (1.x up to 1.0.0.1) and B2B Advanced Communications (1.0.0.2/1.0.0.3) that allows remote attackers to insert arbitrary script/HTML via a crafted URL. Affected components: IBM Multi-Enterprise Integ...
CVE-2015-5022
Summary of details (CVE-2015-5022): IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2 have an information-disclosure vulnerability when guest access is enabled. The affected component places an internal hostname and a...
CVE-2015-5022
IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information ...
PT-2015-6741
Name of the Vulnerable Software and Affected Versions IBM Multi-Enterprise Integration Gateway versions 1.x through 1.0.0.1 IBM B2B Advanced Communications versions 1.0.0.2 through 1.0.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML...
CVE-2015-5022: Exposure of Sensitive Information to an Unauthorized Actor
IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information ...
CVE-2015-4973: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
PT-2015-6754
Name of the Vulnerable Software and Affected Versions IBM Multi-Enterprise Integration Gateway versions 1.x through 1.0.0.1 IBM B2B Advanced Communications versions 1.0.0.2 and 1.0.0.3 before 1.0.0.3 2 Description The issue allows remote authenticated users to obtain sensitive information by...