Websphere Message Broker@7.0.0.6 Security Vulnerabilities and Issues — Websphere Message Broker@7.0.0.6 CVE List

Lucene search

IbmWebsphere Message Broker7.0.0.6

4 matches found

CVE•added 2013/10/19 10:36 a.m.•75 views

CVE-2013-5372

The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.

4.3CVSS6.7AI score0.01552EPSS

CVE•added 2016/01/11 11:59 a.m.•42 views

CVE-2015-7399

IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers to obtain sensitive information about the HTTP server via unspecified vectors.

5.3CVSS4.9AI score0.00226EPSS

CVE•added 2015/02/02 1:59 a.m.•39 views

CVE-2014-6170

The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault.

5CVSS6.1AI score0.00234EPSS

CVE•added 2015/08/23 3:59 p.m.•32 views

CVE-2015-2018

IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

3.5CVSS5.7AI score0.00146EPSS