Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*

part: a version: 9.0.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductIntegration Bus (81523f98-beb0-5e08-83a0-b327cc6b6ad8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1694 vulnerable 2026-06-08 05:09:22.846979 Details available
IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165.
Published: 2017-12-20T18:00:00.000Z
Updated: 2024-09-16T17:19:12.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1693 vulnerable 2026-06-08 05:09:22.841455 Details available
IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.
Published: 2018-01-19T14:00:00.000Z
Updated: 2024-09-16T18:38:40.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1207 vulnerable 2026-06-08 05:09:21.388628 Details available
IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777.
Published: 2017-07-05T17:00:00.000Z
Updated: 2024-09-17T03:22:49.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1144 vulnerable 2026-06-08 05:09:13.131815 Details available
IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033.
Published: 2017-07-05T18:00:00.000Z
Updated: 2024-09-16T23:26:34.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2961 vulnerable 2026-06-08 05:07:43.900232 Details available
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace.
Published: 2016-07-02T14:00:00.000Z
Updated: 2024-08-05T23:40:14.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5011 vulnerable 2026-06-08 05:06:48.561171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0118 vulnerable 2026-06-08 05:06:13.656945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6170 vulnerable 2026-06-08 05:05:56.620769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.