Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductIntegration Bus (81523f98-beb0-5e08-83a0-b327cc6b6ad8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1144 vulnerable 2026-06-08 05:09:13.130642 Details available
IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033.
Published: 2017-07-05T18:00:00.000Z
Updated: 2024-09-16T23:26:34.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9706 vulnerable 2026-06-08 05:08:24.323387 Details available
IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1997918.
Published: 2017-02-15T19:00:00.000Z
Updated: 2024-08-06T02:59:03.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9010 vulnerable 2026-06-08 05:08:22.390540 Details available
IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM Reference #: 1997906.
Published: 2017-02-15T19:00:00.000Z
Updated: 2024-08-06T02:35:02.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2961 vulnerable 2026-06-08 05:07:43.898262 Details available
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace.
Published: 2016-07-02T14:00:00.000Z
Updated: 2024-08-05T23:40:14.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0394 vulnerable 2026-06-08 05:07:15.215317 Details available
IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-05T22:15:24.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7399 vulnerable 2026-06-08 05:07:00.694307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5011 vulnerable 2026-06-08 05:06:48.559637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2018 vulnerable 2026-06-08 05:06:27.259710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0118 vulnerable 2026-06-08 05:06:13.655338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6170 vulnerable 2026-06-08 05:05:56.618963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4819 vulnerable 2026-06-08 05:05:46.172047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.