Websphere Message Broker
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_message_broker:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Message Broker (a4c18dcf-9cb8-5938-b229-4f89e9632cf5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1801 |
vulnerable | 2026-06-08 05:11:18.768765 |
Details available
MEDIUM (5.3)
IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to consume memory resources. IBM X-Force ID: 149639.
Published: 2019-02-04T21:00:00.000Z
Updated: 2024-09-17T04:19:23.303Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1418 |
vulnerable | 2026-06-08 05:09:22.043089 |
Details available
MEDIUM (4)
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406.
Published: 2018-11-26T17:00:00.000Z
Updated: 2024-09-16T21:02:41.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0503 |
vulnerable | 2026-06-08 04:51:09.768558 |
Details available
IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows local users to obtain sensitive information by reading these logs.
Published: 2009-02-13T17:00:00.000Z
Updated: 2024-08-07T04:40:03.593Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.