Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*

part: a version: 7.0.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Message Broker (a4c18dcf-9cb8-5938-b229-4f89e9632cf5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7399 vulnerable 2026-06-08 05:07:00.698121 Details available
IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers to obtain sensitive information about the HTTP server via unspecified vectors.
Published: 2016-01-11T11:00:00.000Z
Updated: 2024-08-06T07:51:27.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2018 vulnerable 2026-06-08 05:06:27.262403 Details available
IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Published: 2015-08-23T15:00:00.000Z
Updated: 2024-08-06T05:02:42.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0118 vulnerable 2026-06-08 05:06:13.650539 Details available
IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ client JAR files that support only weak TLS ciphers, which might make it easier for remote attackers to obtain sensitive information by sniffing the network during a connection to an Integration Bus node.
Published: 2015-06-28T22:00:00.000Z
Updated: 2024-08-06T03:55:28.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6170 vulnerable 2026-06-08 05:05:56.622908 Details available
The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault.
Published: 2015-02-02T01:00:00.000Z
Updated: 2024-08-06T12:10:12.201Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5372 vulnerable 2026-06-08 05:04:51.432324 Details available
The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.
Published: 2013-10-19T10:00:00.000Z
Updated: 2024-08-06T17:06:52.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0482 vulnerable 2026-06-08 05:03:48.303408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0466 vulnerable 2026-06-08 05:03:48.190248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5953 vulnerable 2026-06-08 05:02:58.805737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5952 vulnerable 2026-06-08 05:02:58.803041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3317 vulnerable 2026-06-08 05:02:09.165846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.