Websphere Enterprise Service Bus Security Vulnerabilities and Issues — Websphere Enterprise Service Bus CVE List

IbmWebsphere Enterprise Service Bus

3 matches found

CVE•added 2019/04/08 2:50 p.m.•60 views

CVE-2018-1885

The CVE-2018-1885 issue affects IBM software in the IBM Business Automation Workflow family (V18.0.0.0–18.0.0.2) and related BPM components, where an unauthenticated attacker could obtain sensitive information via a specially crafted HTTP request. The underlying vulnerability relates to an Extern...

5.3CVSS5AI score0.01809EPSS

CVE•added 2014/12/16 11:0 p.m.•50 views

CVE-2014-6176

CVE-2014-6176 affects IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and IBM Business Process Manager Advanced (7.5.x up to 7.5.1.2, 8.0.x up to 8.0.1.3, and 8.5.x up to 8.5.5). The vulnerability arises because the SCA module HTTP binding ignores the SSL setting from the ...

4.3CVSS6.1AI score0.01822EPSS

CVE•added 2018/03/30 4:0 p.m.•48 views

CVE-2018-1384

CVE-2018-1384 affects IBM Business Process Manager (BPM) 8.6 with a cross-site scripting flaw in the Web UI that can let an attacker inject arbitrary JavaScript, potentially leading to credentials disclosure in a trusted session. The IBM Security Bulletin lists affected BPM/PS/WESB offerings and ...

5.4CVSS5.2AI score0.01077EPSS