Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.3:*:*:*:*:*:*:*

part: a version: 1.0.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductB2B Advanced Communications (6478ccdc-5a26-5b39-a862-d5f387e69bef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-0341 vulnerable 2026-06-08 05:07:15.024655 Details available
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.
Published: 2016-05-15T01:00:00.000Z
Updated: 2024-08-05T22:15:23.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7445 vulnerable 2026-06-08 05:07:00.976974 Details available
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.
Published: 2016-01-01T02:00:00.000Z
Updated: 2024-08-06T07:51:27.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5022 vulnerable 2026-06-08 05:06:48.601423 Details available
IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information by leveraging a trading-partner relationship and reading response fields.
Published: 2015-10-05T10:00:00.000Z
Updated: 2024-08-06T06:32:31.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4973 vulnerable 2026-06-08 05:06:48.395864 Details available
Cross-site scripting (XSS) vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Published: 2015-10-05T10:00:00.000Z
Updated: 2024-08-06T06:32:31.418Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.