IBM WebSphere Message Broker 6.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*
part: a version: 6.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Message Broker (a4c18dcf-9cb8-5938-b229-4f89e9632cf5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-5372 |
vulnerable | 2026-06-08 05:04:51.422314 |
Details available
The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.
Published: 2013-10-19T10:00:00.000Z
Updated: 2024-08-06T17:06:52.377Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0482 |
vulnerable | 2026-06-08 05:03:48.303291 |
Details available
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8.5.0.2 and WebSphere Message Broker 6.1, 7.0 through 7.0.0.5, and 8.0 through 8.0.0.2, when WS-Security is used, allows remote attackers to spoof the signatures of messages via a crafted SOAP message, related to a "Signature Wrap attack," a different vulnerability than CVE-2011-1377 and CVE-2013-0489.
Published: 2013-05-29T10:00:00.000Z
Updated: 2024-08-06T14:25:10.381Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5953 |
vulnerable | 2026-06-08 05:02:58.805476 |
Details available
IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T21:21:27.894Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5952 |
vulnerable | 2026-06-08 05:02:58.795105 |
Details available
IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2 does not validate Basic Authentication credentials before proceeding to WS-Addressing and WS-Security operations, which allows remote attackers to trigger transmission of unauthenticated messages via unspecified vectors.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T21:21:28.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3317 |
vulnerable | 2026-06-08 05:02:09.158442 |
Details available
IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment (JRE) files, which might allow local users to gain privileges by leveraging access to uid 501 or gid 300.
Published: 2012-12-05T11:00:00.000Z
Updated: 2024-08-06T19:57:50.473Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0503 |
vulnerable | 2026-06-08 04:51:09.769148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.